Engineers designing passkeys overlooked critical usability issues that confuse average users, according to criticism gaining traction in tech communities. The passwordless authentication standard is struggling with consumer adoption due to poor design decisions.
Passkeys, promoted as a replacement for traditional passwords, were built without sufficient consideration for how everyday users actually think and behave, critics argue. The technology requires users to understand concepts like device syncing, backup codes, and biometric authentication—complexity that undermines the goal of simplification.
Key friction points include unclear recovery processes when users lose access to devices, confusion about where passkeys are stored, and difficulty explaining the system to non-technical users.
The criticism reflects a broader pattern in tech development: solutions optimized for engineering elegance can fail in real-world deployment. Companies like Apple, Google, and Microsoft backing passkeys have implemented various approaches, but adoption remains slow among mainstream users who prefer familiar password managers.
The debate highlights the gap between technical specifications and consumer experience, with 254 comments on the discussion thread indicating widespread concern about passkey viability as a mass-market authentication standard.
A zero-day vulnerability called StyleSmuggler is being actively exploited across all versions of Magento and Adobe Commerce to install Linux backdoors on compromised systems.
A phishing-as-a-service platform called BigBear 2.0 has successfully circumvented multi-factor authentication defenses to compromise more than 5,000 Microsoft 365 credentials across 258 organizations.
Cryptocurrency hardware wallet maker Trezor revealed that an August data breach at logistics provider ShipMonk impacts 81,000 customers total, with an additional 67,000 U.S. customers newly affected.
Security researchers discovered that LG smart TVs continue recording audio and scanning local networks even when the display is powered down. The findings raise concerns about user privacy and device security.