Three independent research efforts presented at Black Hat USA 2026 and in subsequent disclosures have demonstrated practical attacks against passkey implementations, undermining…
Unit 42 demonstrated that Google Password Manager's synced passkeys can be compromised via the Security Domain Secret, allowing recovery of private keys.…
Google Password ManagerpasskeysSecurity Domain SecretUnit 42