Fido Alliance - GoKawiil

Security researcher pushes back on viral claim that passkeys enable device lockdown

A widely shared post titled 'Passkeys are a trap' argued that passkey attestation could let websites eventually restrict logins to approved apps, operating systems and devices. A developer who built an open-source passkeys library has published a rebuttal, saying most consumer passkeys—synced ones stored in iCloud Keychain, Google Password Manager or apps like 1Password and Bitwarden—do not send attestation data at all, even when a site requests it.

scotthelme.co.uk · 2026-10-14

Opinion piece warns passkeys shift login control away from users

A commentary argues that passkeys, the passwordless login standard promoted across major websites, give platforms more control over credentials than passwords, authenticator apps or hardware security keys ever did. The piece traces passkeys to the FIDO Alliance, a coalition of tech companies, banks, governments and nonprofits like Mozilla, and claims each member has its own motive for pushing adoption. It contends users should be wary because websites can progressively restrict how passkeys are used or transferred.

nonfunctional.substack.com · 2026-10-11