Ich kann gar nicht in Worte fasen, sie sehr ich diese Anmeldecodes per EMail oder SMS hasse... 🤬
#passkeys #TOTP
Add Woolworths (#73)
#passkeys
github.com/2factorauth/passkeys/com...
Did you know? Microsoft now supports passkeys for M365 authentication. Phishing-resistant, passwordless, and more secure than SMS MFA.
#Passkeys #Passwordless #M365
https://365securityassessment.com
Passwords are dying and it’s about time.
New NIST guidance:
No forced complexity
No 90-day resets
Yes to passphrases and passkeys
This changes security for individuals and small businesses.
Read more: shorturl.at/zRKzd
#Cybersecurity #Privacy #Infosec #Passkeys #MFA
Join FIDO's Executive Director & CEO Andrew Shikiar at Fraud Fight Club in April 2026. Andrew will be joined by other industry leaders for a deep dive on "Kill the Password: Lessons from the Front Lines of Passkey Deployments"
Learn More: www.fraudfightclub.com/sessions
#passkeys
~Paloalto~
Unit 42 analyzes Google's cloud-based passkey sync architecture, previewing upcoming attack vector disclosures.
-
IOCs: enclave. ua5v. com, caBLE. ua5v. com
-
#Google #Passkeys #ThreatIntel
We built something new: #Passkeys JIT Authorization for #AI #agents
> Sensitive action? Pauses → asks → approve on your device #Passkey → continue
No redirects. No codes. No context switching.
Phishing-resistant by design.
Secure, real-time Human-in-the-loop authz 🛡️📲🧑
Demoing in #claude #code
In our recent webinar “What is possible on the web in 2026”, Matti Tahvonen explains why it’s time to ditch passwords—and what makes passkeys a better, more secure alternative.
🔗 Watch the full webinar: www.youtube.com/live/fMFu725...
#java #webdev #passkeys #javadeveloper #vaadin
TIL of OpenYOLO - "You only login once"
Basically.. proto-FIDO2 but it directly let pages request a password from an authenticator lmao. And save credentials too, not unlike a passkey.
https://openid.net/specs/openyolo-android-03.html
https://github.com/openid/OpenYOLO-Web
What a silly old […]
An image pulled automatically from the post for decorative purposes only.
[uspol]
Users hate it, but age-check tech is coming. Here’s how it works.
On-device face scans and cross-platform age keys decrease privacy risks, but trust issues abound.
Archive: ia: https://s.faithcollapsing.com/sw0it […]
[Original post on faithcollapsing.com]
Passkeys are just public/private key pairs except Microsoft or Google know your private key, right?
#passkeys #security
After Discord fiasco, age-check tech promises privacy by running locally. Does it work? https://arstechni.ca #ageverification #cybersecurity #onlineprivacy #agechecks #privately #agegates #passkeys #agekeys #discord #hackers #Policy #yoti
Oh no/lmao
I've just seen the GitLab's CVE-2026-0723 - January vuln with 2FA bypass involving FIDO2. So that applies to passkey login and 2FA with a security key. Given it's open source I've checked for the commit and uh. They ran the check for "hey is passkey response valid" and then just […]
Preparando nuevo artículo sobre las Passkeys. Spoiler: aún falta mucho para que se constituyan un reemplazo total de las contraseñas.
#passkeys
#Microsoft brings #phishing-resistant #Windows sign-ins via #Entra #passkeys
www.bleepingcomputer.com/news/microsoft/microsoft...
#cybersecurity
If you're in the NYC area, and like talking about moving from #MFA to #StrongAuthentication, the #DigitalCredentials and #DigitalWallets revolution, #passkeys, or the acronym soup in #DigitalIdentity, you might be an #IDPro.
And you need to be at todays #Identibeer.
(Last years trial run was 👍🏽)
Add Aliexpress & Premise Health (#70)
#passkeys
github.com/2factorauth/passkeys/com...
Lors de Paris Web 2025, @garnier.wf nous a expliqué ce que sont les passkeys et comment s’en servir. La vidéo de sa conférence est en ligne.
www.paris-web.fr/2025/confere...
#passkeys #sécurité #authentification
Achievement of the day: I just finished migrating my passkeys and 2FA secrets away from Google and Microsoft. I also removed Google Authenticator from all my devices.
Microsoft Authenticator is now down to a single device with a couple of entries from clients that won't provide alternatives.
I […]
Bitwarden adds support for passkey login on Windows 11
Finally, a password manager that lets you log in with something you'll definitely lose faster than your master password. 🔑💀
🔗 news.falconcyber.online/en/news/20260304-bitward...
#bitwarden #passkeys #cybersecurity
Passkeys are great until your amr claim says the wrong thing. Damien Bowden covers returning pop correctly and requiring phishing resistant auth via acr_values in ASP.NET Core.
#aspnetcore #openidconnect #passkeys
🚀 Unlocking the Future of Security! Meta introduces full passkey support for Facebook & Messenger on mobile. Enhance your online safety today! 🔐📱 Read more: https://innovirtuoso.com/cybersecurity/untitled-post/ #Cybersecurity #Meta #Passkeys #Privacy
Passkeys are mainstream — but removing passwords doesn’t fix auth architecture. The secret changed, the flow often didn’t. Recovery and device lifecycle become the new risk.
Passkeys raise the floor. Architecture defines the ceiling.
#passkeys #MojoAuth
Add Canva (#68)
#passkeys
github.com/2factorauth/passkeys/com...
RE: infosec.exchange/@timcappalli/11614351473...
I would really hate to see passkeys lose momentum because of short-sighted implementations that cause users to dislike and lose trust in secure authentication. Listen to tim. Tim has a good point. #passkeys #infosec
Unbelievable that #Hilton is still using this. Stop with the puzzles and image challenges to block #bots. #Privacy and usability matter more. Implement #passkeys and #OTP. This feels like a relic from another era.
Please, please, please stop using #passkeys to encrypt user data. Please 🙏🏻
blog.timcappalli.me/p/passkeys-p...
Understanding RP IDs (Relying Party IDs) is critical to deploying passkeys correctly and gaining the benefit of phishing-resistant authentication. This post by Eiji Kitamura is a good deep-dive for those looking to #UsePasskeys.
#Passkeys #PhishingResistance @fidoalliance.bsky.social
A deep dive into the very basic concept of #passkeys — RP ID (Relying Party ID)
- How to determine a suitable RP ID for your service
- What if you have multiple domains
- RP ID for apps
web.dev/articles/web...
A deep dive into the very basic concept of #passkeys — RP ID (Relying Party ID)
- How to determine a suitable RP ID for your service
- What if you have multiple domains
- RP ID for apps
web.dev/articles/web...