Experts reveal Google Password Manager can be hijacked to let hackers steal passkeys and gain access to all your secrets

Circuit board and shield icon, Hardware security, computer data protection and electronic technology concept,.

• Palo Alto Networks’ Unit 42 detailed three Google passkey exploits
• Attacks require prior malware infection; methods ranged from impersonating victims to stealing the master secret protecting synced passkeys
• Google implemented fixes after disclosure, with some services (e.g., eBay) patching vulnerabilities directly

Security researchers from Palo Alto Networks’ Unit 42 have found three ways to exploit Google’s passkey system and log into people’s PIN- or biometrics-protected accounts.