Skip to content

Glossary: Attacks and Indicators

passkey

Also written: passkeys

A phishing-resistant way to sign in that uses a cryptographic key pair, with the private key kept on your device, instead of a password or a code someone could relay. Because a passkey only works with the real site, it defends against phishing and most MFA bypasses.

Where the book teaches it

Related terms

MFA bypassMFA (multi-factor authentication)