Similar to This
Previous
8
0
Profile picture of Digital Trends
Digital Trends
A−
 Aug 04
Passkeys were pushed as a safer future. Hackers have figured out ways to break those synced to Google
digitaltrends.com/computing/passkeys-were-pushed-as-a-safer-future-hackers-have-figured-out-ways-to-break-those-synced-to-google/
Passkeys were pushed as a safer future. Hackers have figured out ways to ...
Key FactsResearchers uncover attacks on Google-synced passkeys
Aug 4, 2026 · Reading time: ~30 sec.
Summary created with AI assistance · Source: digitaltrends.com
  • The three Pass-ta-key techniques target Google Password Manager in Chrome on Windows PCs with a Trusted Platform Module.

  • The first attack can request a valid passkey response without administrator privileges, biometrics, a PIN, or victim interaction.

  • GitHub rejected this attack, while eBay initially accepted it and closed the gap after researchers reported it.

  • According to Unit 42, malware can extract the master key temporarily present in Chrome’s memory and decrypt existing and future passkeys.
3 similar articles
3
0
5
0
17
2 57
13
4
Next