AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
Last Update: 10/27/2026 at 6:00 AM EST
Password Managers and Passkeys
Coverage from Scienmag, PCMag, and others
Password managers generate and store unique credentials, autofill them on the correct sites, and can flag weak or exposed passwords—helping limit the damage when a service is breached.
Passkeys use cryptographic keys held on a user’s device and verified with a PIN or biometrics, making them harder to steal through phishing or password-database attacks. Apple, Google, and Microsoft support passkeys, but many services still rely on passwords, so managers, passkeys, and other safeguards such as two-factor authentication can serve complementary roles in protecting accounts.
Looking Back
201 Day Timeline
Feb 16
Mar 23
Apr 20
May 25
Jun 29
Jul 27
Aug 31
All Articles24 articles
Important
Cornell University researchers presented findings in 2026 in Baltimore showing that passkey interfaces can make attacker-controlled authentication methods difficult to detect and revoke.
8/13/2026 • Cybersecurity (Privacy-Relevant) • General
SpyCloud researcher Trevor Hilligoss says passkeys can be bypassed using stolen validated browser cookies, enabling session-token account access.
5/7/2026 • Cybersecurity (Privacy-Relevant) • General
Adam Lowe and Tracy Goldberg compare synced software and hardware-bound passkeys on World Passkey Day, focusing on cloud-breach versus local-key risk for payments and high-assurance verification.
5/7/2026 • Cybersecurity (Privacy-Relevant) • General
Researchers at ETH Zurich and Universita della Svizzera italiana in 2026 demonstrated server-side attacks that can compromise Bitwarden, LastPass and Dashlane vaults during normal user actions.
2/16/2026 • Cybersecurity (Privacy-Relevant) • General
ETH Zurich researchers evaluated Bitwarden, LastPass, and Dashlane this year, revealing encryption weaknesses that could expose user credentials in cloud deployments.
2/17/2026 • Cybersecurity (Privacy-Relevant) • General
Criminals breached LastPass in 2022 and stole encrypted customer vaults, leaving users dependent on strong master passwords to resist offline attacks.
9/1/2026 • Cybersecurity (Privacy-Relevant) • General
Trevor Hilligoss at SpyCloud explains that passkeys can be bypassed through malware-stealing authenticated browser cookies, impacting session-based account access.
5/7/2026 • Cybersecurity (Privacy-Relevant) • General
Researchers have documented at least 39 ways attackers can target passkey software, devices, enrollment, recovery, and synchronization systems without breaking FIDO2 cryptography.
9/4/2026 • Cybersecurity (Privacy-Relevant) • General
Microsoft plans to make passkeys the default for Entra ID from September 2026 and retire SMS and voice authentication across tenants by February 1, 2027.
7/14/2026 • Cybersecurity (Privacy-Relevant) • General
Researchers at ETH Zurich and Universita della Svizzera italiana in 2026 demonstrated server-side tampering can compromise cloud password-manager vaults for Bitwarden, LastPass, Dashlane, and 1Password.
2/17/2026 • Cybersecurity (Privacy-Relevant) • General
In the US, a privacy-and-security column describes an account takeover using optional MFA gaps and Gmail manipulation, and argues passkeys should replace OTP-based authentication.
7/5/2026 • Cybersecurity (Privacy-Relevant) • General
Interesting
Password managers continue protecting online accounts as passkeys expand across major platforms but remain unavailable for many pharmacies, schools, utilities, airlines, and other services.
8/23/2026 • Cybersecurity (Privacy-Relevant) • General
Cybersecurity guidance highlights password reuse after data breaches and recommends password managers and passkeys, supported by Apple, Google, and Microsoft, to reduce credential compromise.
5/13/2026 • Cybersecurity (Privacy-Relevant) • General
Verizon 2025 reports stolen credentials as initial access in 22% of data breaches, motivating password managers and passkeys to reduce reuse and account compromise.
4/20/2026 • Cybersecurity (Privacy-Relevant) • General
Users on the internet use password managers to generate unique passwords and autofill across sites, reducing data breach and phishing risks across platforms.
2/25/2026 • Cybersecurity (Privacy-Relevant) • General
ExpressVPN updated ExpressKeys on Android and iOS in 2024 with passkeys, FIDO Credential Exchange support, and controlled encrypted secure sharing links.
7/2/2026 • Privacy Technology & AI • General
Trevor Hilligoss of SpyCloud discusses passkeys in 2024-era online authentication security, highlighting cookie hijacking and account recovery risks.
5/7/2026 • Privacy Technology & AI • General
Across phones, Windows PCs, and browsers, Google, Apple, Microsoft, Bitwarden, and Dashlane provide password-management tools that reduce credential-stuffing and breach-related account risks.
8/10/2026 • Cybersecurity (Privacy-Relevant) • General
Daniel experienced overnight account takeover across online services after attackers exploited a weak reused password, exposing private content and enabling fraudulent activity.
8/5/2026 • Cybersecurity (Privacy-Relevant) • General
Wirecutter staff writer Max Eddy explained how password managers, two-factor authentication, and passkeys can protect online accounts from takeover during a discussion hosted by Rosie Guerin.
8/4/2026 • Cybersecurity (Privacy-Relevant) • General
Security guidance highlights passkeys, hardware keys, and Germany's chipTAN and national ID card as stronger defenses against phishing and SIM swap account takeover in 2024.
7/20/2026 • Cybersecurity (Privacy-Relevant) • General
Security guidance recommends email aliases, unique password management, and stronger two-factor methods to reduce account takeover after credential exposure.
7/15/2026 • Personal Data & Identity • General
Google, Apple, and Microsoft support passkeys that replace passwords with device-bound cryptography, reducing phishing and breach impact.
6/8/2026 • Cybersecurity Tech (Privacy-Relevant) • General
Apple announced at WWDC that the Passwords app will single-tap update weak or compromised passwords using Safari and Apple Intelligence integration.
6/9/2026 • Cybersecurity Tech (Privacy-Relevant) • General