There very well may be major vulnerabilities in Passkeys or the FIDO spec they're based on. This most definitely ain't one of them.
https://arstechnica.com/security/2025/08/new-research-claiming-passkeys-can-be-stolen-is-pure-nonsense/
Dan Goodin
npub1z3…8qvzu
2025-08-28 16:21:58 UTC
Author Public Key
npub1z3lwfekw80j4ngzg6ky3ks202xr6uwnd4jttxzsd4euc9l55euvq48qvzuSeen on
wss://relay.momostr.pinkPublished at
2025-08-28 16:21:58 UTCEvent JSON
{
"id": "a4818c9b961621e1a1c59a5627eeafe529fe60a82d6af21fe52cb6ec4dfc96ad",
"pubkey": "147ee4e6ce3be559a048d5891b414f5187ae3a6dac96b30a0dae7982fe94cf18",
"created_at": 1756398118,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@dangoodin/115107307117474502",
"web"
],
[
"proxy",
"https://infosec.exchange/users/dangoodin/statuses/115107307117474502",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/dangoodin/statuses/115107307117474502",
"pink.momostr"
],
[
"-"
]
],
"content": "There very well may be major vulnerabilities in Passkeys or the FIDO spec they're based on. This most definitely ain't one of them.\n\nhttps://arstechnica.com/security/2025/08/new-research-claiming-passkeys-can-be-stolen-is-pure-nonsense/",
"sig": "9863723462b6c471d48cff83a71503915370c07f4ebf9067dae06eaa96ef72cb0e7a660e9501f7ce028c00429c4f9e6d0c43264a8fbf3344d8848db9a2224d78"
}