Hackers are now using passkeys as bait to target Microsoft 365 accounts.
The scam is pretty simple:
>Attackers pretend to be IT support and tell employees they need to set up or update a passkey.
>They then send them to a fake Microsoft login page.
>The page looks legitimate, but it’s actually designed to trick people into giving the attackers access to their account.
>Once they get in, hackers can add their own way to log in and keep access searching through emails, SharePoint and OneDrive files and steal sensitive company data.
Fix for passkeys is in, cc @clerk I cut an issue for the electron package (ty for rushing that out for us!)
Built, filled and merged all from my phone with T3 Code
Face ID. Fingerprints. Passkeys.
All built for a different internet.
VeryAI introduces a different approach:
→ Palm biometrics (not publicly available data)
→ Works on any smartphone
→ Person-bound identity
→ Built-in liveness + AI resistant
This is what identity looks like in an AI native internet.
Tesla app adds passkey support for passwordless sign-in.
Tesla app version 4.61.0 now lets users sign in with Face ID, Touch ID, or their device passcode instead of a traditional password.
Passkeys use cryptographic credentials stored on the device, making them highly resistant to phishing and password-based credential leaks.
The feature began rolling out to iOS users on September 19, 2026, with Android fingerprint support expected soon.
Users can enable it under Security & Privacy > Sign In Management in the Tesla app.
Tesla is making account security faster, simpler, and less dependent on passwords.
there's a lot of product magic in agents like muse or instinct in making auth into websites work. however, there still seems to be some ways to go given the various login systems you run into (passkeys, OTP via text or email, 2fa, "auth on other device").
Wallet recovery should not feel like starting over.
CoinDesk reports Monad proposed separating account addresses from the keys that control them, opening paths to passkeys, recovery and post-quantum upgrades. Safer Web3 starts before the signature. 🔐🧭
#HootArk# #Web3#
LATEST: ⚡ Monad has proposed a wallet upgrade letting users swap out the keys controlling an account without changing its address, paving the way for passkeys and recovery tools.
The lives of Trezor owners are now at risk. Crooks can now turn up at their houses to try and extort assets from them, as per
This is why ICP introduced Internet Identity 5 years ago. Passkeys = *decentralized* security.