|
You are here |
blog.trailofbits.com | ||
| | | | |
janko.io
|
|
| | | | | Passkeys are a modern alternative to passwords, where the user's device performs the authentication, usually requiring some form of user verification (biometric identification, PIN). Passkeys are built on top of WebAuthn specification, which is based on public-key cryptography. Keypairs are created for each website, and the public key is sent to the server, while the private key is securely stored on the device. This makes passkeys: | |
| | | | |
www.cossacklabs.com
|
|
| | | | | Designed for securing online accounts, FIDO U2F as a protocol and YubiKey as a hardware tool are not silver bullets. If not used wisely, this powerful combo becomes an attractive target in the hands of skilful attackers. | |
| | | | |
educatedguesswork.org
|
|
| | | | | [AI summary] This article discusses advanced password security mechanisms, focusing on technologies like two-factor authentication, password authenticated key agreement, and public key authentication to enhance web login security beyond traditional passwords. | |
| | | | |
truss.works
|
|
| | | At this point, if you haven't had a password leaked as part of a hack, you probably know someone who has. Here are some key lessons on how to better protect yourself and your data. | ||