Passkeys are supposed to be unphishable and unstealable, but that safety depends on whether yours are synced to the cloud or bound to a single device. Here's what actually happens when the device is gone.

Google, Apple and your bank keep asking you to make one. A passkey is a login that never sends its secret across the wire, which is why it beats the password at the thing passwords fail at most: phishing.

The hardest frauds to stop are the ones the victim authorises. Apple's new iOS 27 framework watches the behaviour, not just the password.

Google's new bot test asks you to wave at your webcam, mapping 21 points on your hand. It aims to stop AI agents, but privacy researchers are uneasy.