39 New Methods That Compromise Passkey Authentication

Researchers have documented 39 methods to compromise passkey authentication, as reported by Token. These attacks exploit authentication prompts, synced credentials, enrollment, and recovery processes without breaking FIDO2 cryptography. The findings highlight that passkeys, while reducing password attacks, still have vulnerabilities in their implementation and trust boundaries.