That's why passkeys are useful, they are immune to all of that. If your bank is example.com, example.net cannot compromise your account. Even if you're 100% convinced that example.net is your real bank, your passkey for example.com will not work there. This has been tested in the real world, it has stopped some very sophisticated phishing attempts.
https://blog.cloudflare.com/2022-07-sms-phishing-attacks/
William O'Connell
npub16l…ktrat
2025-07-02 17:34:52 UTC
in reply to nevent1q…u899
Author Public Key
npub16l9rs7mt2au4zlwtacv4q4uwrp94km00mlm4letscxfty06z0j9q9ktratSeen on
wss://relay.momostr.pinkPublished at
2025-07-02 17:34:52 UTCEvent JSON
{
"id": "29a51715da6cef582048914c0a6036d63754e0f1a4fb4440cc844a34a6ac8dcf",
"pubkey": "d7ca387b6b5779517dcbee1950578e184b5b6defdff75fe570c192b23f427c8a",
"created_at": 1751477692,
"kind": 1,
"tags": [
[
"p",
"f8347ec37d9f23959ba62dd8391fbcade87a7c071205c96f890432e5c047a6ed"
],
[
"e",
"f82020b956ae86203d54c7b837a69fb8862ff67de3061c677449781ca57f7b1f",
"",
"root",
"f8347ec37d9f23959ba62dd8391fbcade87a7c071205c96f890432e5c047a6ed"
],
[
"p",
"581d330656a44fab24874d55110a9239f435f132b98eda7c732524152ffaef84"
],
[
"proxy",
"https://mas.to/@williamoconnell/114784842082352927",
"web"
],
[
"p",
"d7ca387b6b5779517dcbee1950578e184b5b6defdff75fe570c192b23f427c8a"
],
[
"e",
"f44d1e06bc16533ab0e7b12a61afb583af1d12e40dd8d2f8547ecd126d7e454e",
"",
"reply",
"581d330656a44fab24874d55110a9239f435f132b98eda7c732524152ffaef84"
],
[
"proxy",
"https://mas.to/users/williamoconnell/statuses/114784842082352927",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mas.to/users/williamoconnell/statuses/114784842082352927",
"pink.momostr"
],
[
"-"
]
],
"content": "That's why passkeys are useful, they are immune to all of that. If your bank is example.com, example.net cannot compromise your account. Even if you're 100% convinced that example.net is your real bank, your passkey for example.com will not work there. This has been tested in the real world, it has stopped some very sophisticated phishing attempts.\n\nhttps://blog.cloudflare.com/2022-07-sms-phishing-attacks/",
"sig": "cc40fed345218ccadc68b67fe7e42f234096b98c5bf15991ace44ce57fb15281ebd0cee6e5a1f76f9537c1bef6c0e3a3f4f4b82809425512b759750411c46b28"
}