Passkeys: A shattered dream

# · 🔥 954 · 💬 757 · 12 days ago · fy.blackhats.net.au · nmjenkins · 📷
Now with resident keys as passkeys as users we certainly don't have the expectation that our security keys will work when we want to use them! Since then Passkeys are now seen as a way to capture users and audiences into a platform. The more egregious offender is Android, which won't even activate your security key if the website sends the set of options that are needed for Passkeys. A sobering pair of reads are the Github Passkey Beta and Github Passkey threads. Multiple users describe that Android can not create Passkeys due to platform bugs. The users we need to be advocates for changing from passwords to passkeys. Don't use a platform controlled passkey store, and be very careful with security keys.
Passkeys: A shattered dream



Send Feedback | WebAssembly Version (beta)