Researchers reveal passkeys may not be as safe as we think they are - here's how to stay safe

Passkeys on mobile illustration.

• Browsers are the weak link that attackers now exploit for control
• SquareX shows how trivial scripts can intercept and hijack passkey flows
• From a user’s perspective, fake passkey prompts look entirely genuine

For years, the shift away from passwords toward passkeys has been framed as the future of secure authentication.