Three independent research efforts presented at Black Hat USA 2026 and in subsequent disclosures have demonstrated practical attacks against passkey implementations, undermining…
Unit 42 demonstrated that Google Password Manager's synced passkeys can be compromised via the Security Domain Secret, allowing recovery of private keys.…
Google Password ManagerpasskeysSecurity Domain SecretUnit 42
Unit 42 demonstrated attacks against Google Password Manager's synced-passkey system in Chrome, including recovery of the Security Domain Secret and synced passkey…