Are passkeys more secure than passwords?

Date:
Mon, 26 Oct 2026 10:00:00 +0000

Description:
What makes them safer and where they fall short

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Passkeys are being marketed as the silver bullet for online security. Major companies like Apple, Google,
and Microsoft have all rolled them out recently, and many websites now offer them as a login option.

The question is, do they deliver on that promise? Furthermore, what might you be giving up in exchange for this supposed convenience? Lets break it down. This article is the final piece in a series of content relating to Cybersecurity Awareness Month 2026, which runs throughout October. The previous articles have covered reducing data collection on social media , VPN dark web alerts and free alternatives , VPN protection when using AI , and
the benefits of dedicated antivirus over packaged solutions . Why passwords are failing (and how passkeys fix it) (Image credit: Shutterstock) Passwords are showing their age. Theyre easy to forget, and impossible to remember when you use unique ones everywhere.

Every time theres a massive data breach , millions of your credentials end up floating around on dark web marketplaces. Plus, we also reuse passwords too often, which means one compromised site can give attackers access to your email, bank account, and social media . You may like The era of passwords is coming to an end Authentication does not equal authorization: Are we asking passkeys to prove too much? Experts reveal Google Password Manager can be hijacked to let hackers steal passkeys and gain access to all your secrets

Yes, password managers help but they dont protect against phishing, and they rely on you trusting that single database.

Then theres phishing . Even the savviest person can get tricked into typing their password into a fake login page that looks identical to the real one.

Enter passkeys . Instead of something you remember, passkeys use
cryptographic keys. One public key lives on the websites servers, and one private key stays securely locked on your device. When you log in, your
device proves your identity mathematically without ever transmitting. Theres no password to type, so theres nothing for a hacker to steal remotely. The biometric elephant in the room Heres where things get tricky. To unlock most passkeys, you need to authenticate with your phone or computer using a fingerprint, facial scan, or PIN. You might worry that youre just handing
over our biometric data to Big Tech but thats fortunately not the case.

Your fingerprint or face scan never leaves your device. That scan simply unlocks a secure chip that stores your private key. What to read next I went down a privacy rabbit hole and came out with a whole new digital setup Microsoft Cloud accounts stolen in highly complex impersonation and passkey phishing campaign This new malware can use Google passkeys even after a
victim resets their password

Once unlocked, the chip confirms your identity to the website. Companies like Apple , Google, and Microsoft never see your actual biometric template. They just manage the encrypted container holding your passkeys. The real risks: Device access and lock-in Passkeys arent perfect, though. Instead of someone guessing your password online, the concern becomes physical access to your unlocked phone.

If a thief has your device and knows your screen lock PIN, they could potentially access all your passkey-secured accounts. The good news is most devices require re-authentication for each login attempt anyway.

Another issue is ecosystem lock-in. Passkeys are often tied tightly to specific platforms such as Apple iCloud Keychain and Google Password Manager
.

While syncing across devices within an ecosystem works smoothly, moving between iPhone and Android can be a headache. You might find yourself locked out of accounts unless youve exported your passkeys properly beforehand. The verdict Passkeys provide stronger protection than passwords especially against remote attackers and phishing attempts.

The cryptographic approach eliminates whole categories of attacks that plague traditional passwords. That said, they introduce new considerations around physical device security and platform dependency.

Should you start using them? Yes. Treat them as an upgrade, not a magic wand. Combine passkeys with good habits such as keeping your devices updated and using screen locks, and youll be protected against common threats.



======================================================================
Link to news story: https://www.techradar.com/computing/cyber-security/are-passkeys-more-secure-th an-passwords


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)