Filippo Valsorda’s proposal to add a crypto/passkey package to Go’s standard library introduces a stateless, no‑callback API that simplifies Passkey integration for small‑to‑medium sites by standardising credential storage, redefining user‑ID handling, and trimming unnecessary protocol features.
Filippo Valsorda proposes a PHC‑style one‑line Passkey record format that reuses WebAuthn authenticator data, eliminates the need for cross‑account Credential ID uniqueness checks, and includes a draft stateless crypto/passkey Go 1.28 API detailing registration and login flows.
The article explains how fatigue attacks target Microsoft accounts by repeatedly sending login prompts, describes Microsoft's new numeric verification safeguard, and offers practical security measures such as changing passwords, using passkeys, switching to alternative authenticators, and updating the linked email to protect personal data.
Google announced that Android and Chrome will now support Passkey key‑login, a biometric‑based, public‑key authentication method that replaces traditional passwords, allowing users to create a secure credential on their device, sync it across platforms, and developers to integrate it via WebAuthn and related APIs.
Google announced that Android and Chrome will adopt Passkey, a biometric‑based, public‑key login system that replaces traditional passwords, offering cross‑platform support, phishing resistance, and cloud‑backed recovery, with developers able to integrate it via WebAuthn and Google Play Services.
Google’s new Passkey system, introduced in Android and Chrome, combines biometric verification with public‑key encryption to create a cross‑platform, phishing‑resistant login method that syncs across devices and promises to replace traditional passwords.
