Passkeys Pose Increased Risks for Domestic Abuse Survivors

A recent study reveals that passkeys, designed to enhance online security, may pose greater risks for individuals facing intimate partner violence. Conducted by researchers at Cornell University, the study involved 31 participants who struggled to identify and remove unauthorized passkeys created by attackers with prior access to their accounts. Participants found it challenging to navigate security alerts and account settings, often requiring assistance to secure their accounts. The findings indicate that existing online services need to improve their security interfaces to help users better manage passkeys and recognize potential misuse. The research highlights the urgent need for enhanced security measures for vulnerable populations. The study was presented at the 35th USENIX Security Symposium held from August 12-14, 2026, in Baltimore.

Key Points: • Passkeys can be exploited by abusers to gain unauthorized access to victims' accounts. • Participants in the study struggled to identify and remove malicious passkeys without assistance. • Existing security interfaces for passkeys are confusing and inadequate for user needs.