[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHK8kv8DD1Qog74bnOtJphiyJ5fmECEjxY5j5DD6ORWo":3},{"article":4,"iocs":54},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":31,"category":32,"article_tags":36},"e8402bd4-fcd0-4247-ba8d-c34a85d38c96","39 New Methods That Compromise Passkey Authentication","39-new-methods-that-compromise-passkey-authentication-a1caa1","Passkeys eliminate many password-based attacks, but researchers have documented 39 methods for compromising authentication built around them. Token explains how attackers can abuse authentication prompts, synced credentials, enrollment, recovery, and other trust boundaries without breaking FIDO2 cryptography. [...]","While passkeys offer enhanced security over traditional passwords, researchers have identified 39 documented methods to compromise authentication systems built around them. These attacks exploit trust boundaries in the authentication process, such as enrollment, recovery, and user verification, rather than breaking the underlying FIDO2 cryptography. SpecterOps research highlights that malware can manipulate the WebAuthn infrastructure to generate signed assertions, allowing attackers to authenticate without ever accessing the private key.","Researchers document 39 methods to compromise passkey authentication without breaking FIDO2 cryptography.","39 New Methods That Compromise Passkey Authentication Sponsored by Token September 4, 2026 10:01 AM 0 Passkeys were introduced with a strong security proposition. Replace passwords with public key cryptography, bind the credential to the legitimate service, keep the private key away from the server, and many of the phishing and credential theft attacks that have plagued enterprise security for decades become dramatically harder. All of that is true. But the security conversation has changed very quickly. There are now at least 39 publicly documented methods, attack paths, research techniques, and exploitation scenarios involving passkeys and the infrastructure around them. Many already have working proof of concept tools or published research showing exactly how the techniques can be executed. Some are already appearing in real world attack patterns. That does not mean criminals have operationalized all 39. It does mean the playbook is being written in public, and attackers no longer have to invent these techniques themselves. More importantly, the research exposes a fundamental distinction that enterprises need to understand. The cryptography inside FIDO2 can remain completely intact while the account protected by the passkey is still compromised. The Target Is No Longer Just the Passkey A modern passkey authentication ceremony crosses an extraordinary number of trust boundaries. It can involve the web application, browser, operating system, password manager, cloud synchronization service, mobile device, Bluetooth transport, account recovery system, enrollment process, help desk, and ultimately the human being approving the authentication. Researchers are attacking almost every one of those layers. Published techniques now include assertion mining, assertion replay, circuit breaker attacks, assertion phishing, browser hooking, assertion capture, challenge injection, detour replay, user verification manipulation, and user presence manipulation. SpecterOps demonstrated the significance of this problem in its Pass the Passkey research. One of its most important observations was that malware does not necessarily need to extract a private key. A malicious Windows application can ask the legitimate WebAuthn infrastructure to generate a signed assertion. The user sees what appears to be a legitimate Windows authentication experience, completes verification, and the attacker receives the resulting assertion. The private key never left its protected location. The cryptography was not cracked. Yet the authentication process was successfully manipulated. That distinction is central to understanding the new passkey threat model. Cryptography is not where Passkeys Fail Passkeys are not completely secure unless they are tied to dedicated biometric hardware. Learn how attackers exploit passkey enrollment rather than breaking passkey cryptography, and why dedicated biometric hardware strengthens enterprise identity assurance. Download Report Even the Passkey Prompt Is an Attack Surface Several of the 39 published techniques target the user interface surrounding authentication. Researchers have demonstrated passkey prompt flooding, credential interface deception, application metadata spoofing, window handle spoofing, remote desktop passkey phishing, and FIDO interface overlay attacks. This recreates a problem the security industry already encountered with push-based MFA. Users become accustomed to authentication prompts. Once authentication becomes a routine visual interaction, attackers can manufacture, repeat, disguise, or strategically time those interactions. SpecterOps demonstrated tooling capable of repeatedly invoking legitimate looking Windows passkey prompts. Researchers also demonstrated techniques that can make malicious authentication activity appear to originate from an application the employee already trusts. The lesson is important. Phishing resistance at the cryptographic protocol layer does not guarantee deception resistance across the operating system, browser, application, and user interface layers surrounding that protocol. Shareable Passkeys Expand the Attack Surface The attack surface grows significantly when passkeys can be shared, synchronized, exported, restored, or moved between devices. The published inventory now includes synced vault compromise, Apple or Google account takeover, cloud recovery takeover, stolen or compromised phones, mobile malware, rooted mobile devices, hybrid authentication manipulation, KeePassXC export theft, Bitwarden export theft, credential exchange theft, malicious browser extensions, and attacks involving CTAP and Bluetooth communication. This is not fundamentally a cryptography problem. It is an architectural problem. Once a credential can move between devices, synchronize through a cloud account, be exported from a vault, be restored using another identity, or be recovered through another process, the security boundary expands far beyond the original authenticator. An attacker no longer needs to defeat FIDO2. The attacker needs to compromise one sufficiently trusted component somewhere in the surrounding ecosystem. A synchronized passkey can therefore use extremely strong cryptography while still inheriting the weaknesses of the phone, operating system, password manager, cloud account, browser, recovery process, and synchronization system responsible for managing it. Enrollment and Recovery Create Another Opening Some of the most consequential attacks do not steal an existing passkey at all. They simply create another one. Published techniques include shadow passkeys, enrollment vishing, attacker phone enrollment, attacker controlled passkey registration, help desk takeover, temporary credential abuse, SIM based recovery, reverse vishing, and migration pretext attacks. Consider what happens when an attacker gains enough control of an employee account to initiate legitimate passkey registration. Instead of extracting the employee's existing credential, the attacker registers an entirely new credential on a device controlled by the attacker. Nothing has been cracked. Nothing has necessarily been stolen from the existing authenticator. The legitimate service itself creates a perfectly valid credential for the adversary. This leads to an increasingly important identity principle. Phishing resistant authentication is insufficient if enrollment, replacement, recovery, and device registration are not protected to the same standard. Dedicated Biometric Hardware Changes the Attack Surface Dedicated biometric hardware approaches the problem very differently from passkeys stored on general purpose devices. A purpose-built biometric authenticator can retain the private credential inside secure hardware with no cloud synchronization, no export mechanism, and no password manager responsible for moving the credential between devices. Authentication can require a live fingerprint directly on the authenticator as well as physical proximity to the endpoint requesting access. Just as importantly, a dedicated authenticator does not need to contain a traditional general-purpose operating system, an application store, a browser, or a screen. That distinction eliminates enormous portions of the attack surface. There are no third-party applications for an attacker to replace with malicious versions. Rogue applications cannot simply be installed on the authenticator. There is no browser extension ecosystem to compromise. There is no screen on which malware can present a deceptive authentication interface. There is no consumer operating system filled with unrelated applications, permissions, background services, and update dependencies. The authenticator performs a very small number of security specific functions and nothing else. This drastically changes the economics of attacking it. Instead of attempting to compromise a huge general purpose computing environment, an attacker is confronting a tightly controlled hardware device desi","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002F39-new-methods-that-compromise-passkey-authentication\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fposts\u002F2026\u002F08\u002F28\u002F39-methods-compromise-passkeys.jpg","2026-09-04T14:01:11+00:00","2026-09-04T16:00:27.409378+00:00",8,[18,21,24,26,28],{"name":19,"type":20},"FIDO2","product",{"name":22,"type":23},"passkey authentication","technology",{"name":25,"type":20},"WebAuthn",{"name":27,"type":20},"Windows",{"name":29,"type":30},"SpecterOps","threat_actor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,42,47,49],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":48},{"id":31,"icon":33,"name":34,"slug":35},{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[]]