auth – PwnDefend

PASSKEYS ARE NOT A TRAP

This is one of the strangest takes on security I’ve seen in a while: passkeys are a trap, do not use them (WTF).

It’s 12 pages and over 4,000 words, an essay mixing real facts with a lot of invalid and odd reasoning. Not everything in it is untrue, which is what makes it slippery. Here are the claims that make up the main bulk of the argument, and why they don’t make sense:

Defense

People and Passwords, why passkeys might change the game

This weekend at BSIDES London it was great to have the UK National Cyber Security Center (NCSC) (the UK’s technical authority on cyber security) give a talk about passkeys!