#passkeys

Login failures that never reach your server You ship passkeys. Server logs look clean,...

Passwords were designed for a world where people had five logins. Today most of us have dozens, and...

Passkeys are a production-ready, phishing-resistant authentication primitive built into the web...

A practical, source-linked guide to running Supabase in production: prepare for the October 30 Data API grants change, secure tables with RLS, manage API keys and JWTs, choose the right connection pool, scale Realtime, understand Edge Function limits, and estimate costs.

Inside LINE's in-app browser, the passkey button did nothing. How to detect whether passkeys actually work, why NotAllowedError doesn't mean the user cancelled, and why a null from your backend breaks Safari.

Why AAGUID restrictions are trickier than they look If you're designing passkey policy for...

Four numbers from the FIDO Alliance explain why I now pitch passkeys to merchants as a payments...

Starlink has implemented optional passkey support, allowing users to authenticate via hardware keys, PINs, or biometric sensors like TouchID and FaceID. Th

Solana verifies passkey signatures natively but rejects high-S values, caps eight per instruction and charges a signature fee each. The rules, from source.

A post titled "I don't like passkeys" spent a day near the top of Hacker News recently, pulling in...

Scepticism about passkey onboarding is understandable. It is not a reason to evaluate today's...

A Substack post tells everyone to avoid passkeys. I checked it against the specs, vendor docs and NIST guidance. The lock-in worry is real, but attestation isn’t being forced on consumers yet, and passkeys beat TOTP on phishing. Here’s what holds up, what doesn’t, and what to do.