Tagged articles

WebAuthn

9 articles · Page 1 of 1

Aug 10, 2026 · Information Security

Black Hat Exposes Pass‑the‑Passkey Attack: Windows Event Log Extraction and Replay of YubiKey Tokens

Researchers at Black Hat 2026 demonstrated a Pass‑the‑Passkey attack where, after gaining local code execution, an adversary reads Windows event logs to harvest WebAuthn authentication statements from a YubiKey, then replays them to Microsoft Entra ID, bypassing MFA without physical key possession.

Authentication ReplayMicrosoft Entra IDPass-the-Passkey

0 likes · 4 min read

Black Hat Exposes Pass‑the‑Passkey Attack: Windows Event Log Extraction and Replay of YubiKey Tokens

TonyBai

Aug 7, 2026 · Information Security

Why Go’s New crypto/passkey Package Could Nail Password‑less Login

Filippo Valsorda’s proposal to add a crypto/passkey package to Go’s standard library introduces a stateless, no‑callback API that simplifies Passkey integration for small‑to‑medium sites by standardising credential storage, redefining user‑ID handling, and trimming unnecessary protocol features.

GoPasskeyWebAuthn

0 likes · 15 min read

Why Go’s New crypto/passkey Package Could Nail Password‑less Login

TonyBai

Jul 22, 2026 · Information Security

Storing Passkeys as a Single String and a Draft Go 1.28 crypto/passkey API

Filippo Valsorda proposes a PHC‑style one‑line Passkey record format that reuses WebAuthn authenticator data, eliminates the need for cross‑account Credential ID uniqueness checks, and includes a draft stateless crypto/passkey Go 1.28 API detailing registration and login flows.

API DesignGoPHC string

0 likes · 13 min read

Storing Passkeys as a Single String and a Draft Go 1.28 crypto/passkey API

Laravel Tech Community

Nov 1, 2022 · Information Security

Google Introduces Passkey Key‑Login for Android and Chrome: A Secure Alternative to Passwords

Google announced that Android and Chrome will now support Passkey key‑login, a biometric‑based, public‑key authentication method that replaces traditional passwords, allowing users to create a secure credential on their device, sync it across platforms, and developers to integrate it via WebAuthn and related APIs.

AndroidFIDOPasskey

0 likes · 4 min read

Google Introduces Passkey Key‑Login for Android and Chrome: A Secure Alternative to Passwords

MaGe Linux Operations

Oct 26, 2022 · Information Security

Why Google’s New Passkey Is Replacing Passwords on Android and Chrome

Google announced that Android and Chrome will adopt Passkey, a biometric‑based, public‑key login system that replaces traditional passwords, offering cross‑platform support, phishing resistance, and cloud‑backed recovery, with developers able to integrate it via WebAuthn and Google Play Services.

AndroidChromePasskey

0 likes · 4 min read

Why Google’s New Passkey Is Replacing Passwords on Android and Chrome

Programmer DD

Oct 17, 2022 · Information Security

Can Google’s Passkey Login Finally End Passwords?

Google’s new Passkey system, introduced in Android and Chrome, combines biometric verification with public‑key encryption to create a cross‑platform, phishing‑resistant login method that syncs across devices and promises to replace traditional passwords.

AndroidFIDOPasskey

0 likes · 4 min read

Can Google’s Passkey Login Finally End Passwords?

ELab Team

Jul 7, 2022 · Information Security

Is Your Password Really Secure? Hashing, Salting, and WebAuthn Explained

This article examines why passwords are often insecure, explains how they should be stored using hash algorithms and salts, outlines common password‑weaknesses and system vulnerabilities, and introduces FIDO/WebAuthn as a modern, password‑less authentication solution.

FIDOHashingWebAuthn

0 likes · 31 min read

Is Your Password Really Secure? Hashing, Salting, and WebAuthn Explained

Alibaba Terminal Technology

Nov 27, 2020 · Frontend Development

What Chrome 87 Brings: Major Performance Boosts and New Web APIs

Chrome 87 (M87) introduced a suite of performance‑focused enhancements and new web APIs—including tag throttling, occlusion tracking, forward/back cache, WebAuthn debugging, camera PTZ control, range‑request support in service workers, and a font‑access API—significantly improving browser efficiency and developer capabilities.

Camera PTZChromeFont Access

0 likes · 8 min read

What Chrome 87 Brings: Major Performance Boosts and New Web APIs

Sohu Tech Products

Nov 6, 2019 · Information Security

Evolution of Web Authentication: From Passwords to WebAuthn

This article reviews the historical development, current practices, and future direction of web authentication, covering traditional password login, third‑party protocols like OpenID and OAuth2.0, two‑factor authentication methods, and the emerging password‑less WebAuthn standard.

2FAOAuth2.0OpenID

0 likes · 12 min read

Evolution of Web Authentication: From Passwords to WebAuthn