Passkeys Explained — How They Kill Phishing, Vishing & Password Theft
Tech Updates by Andres Sarmiento
Episode notes
Every breach in our last episode died the same way it started — with a password. So this week: the fix that's finally winning. On World Passkey Day this May, the FIDO Alliance counted 5 billion passkeys in use. The password isn't dead yet — but we finally have the thing that kills it.
What you'll hear:
• How a passkey works — public/private keypair, private key never leaves your device, origin-bound signatures
• Why passkeys defeat the 2026 attack playbook — phishing, credential stuffing, MFA fatigue, and the help-desk reset scam (CISA advisory AA23-320A names FIDO as the fix)
• The numbers — 98% vs 32% sign-in success, ~1M passkeys/day, Gartner's 2027 call
• Synced vs device-bound passkeys — and why device-bound = NIST AAL3
• The honest half — account recovery, device loss, and the real 2026 frontier
• Network+/Security+ relevance — phishing-resis ...
Read more