passkeys

AI security interview questions tagged passkeys, across every topic.

2 questions · 0 unlocked for you

Open full answer →

Open full answer →

Concepts behind "passkeys"

Explanations of the mechanisms these questions rely on.

Identity & Access

Passkeys, WebAuthn and Phishing ResistanceA passkey is a WebAuthn credential: a key pair whose private key stays in an authenticator and whose public key the website stores. To log in, the authenticator signs a fresh challenge together with data the browser fills in, including the site's origin, and the credential only works for the relying party ID it was created for. A look-alike domain cannot obtain a usable assertion, unlike with one-time codes or push prompts. Synced passkeys are convenient and meet NIST AAL2; device-bound keys are needed for AAL3. Recovery, fallbacks and stolen sessions remain separate problems.

Explore the full curriculum →