Unit 42 demonstrated that Google Password Manager's synced passkeys can be compromised via the Security Domain Secret, allowing recovery of private keys. The secret is exposed in Chrome's process memory during re-registration.
Unit 42 demonstrated that Google Password Manager's synced passkeys can be compromised via the Security Domain Secret, allowing recovery of private keys. The secret is exposed in Chrome's process memory during re-registration.