FIDO2 Attack Vector Analysis Catalogs Phishing Bypasses Against Passkey Authentication
arXiv·medium signal
With 890,000+ phishing attacks in Q3 2025 alone, this systematic analysis catalogs attack vectors against FIDO2/passkey authentication — the technology positioned as the post-password standard. The paper identifies specific bypass techniques that undermine the security guarantees FIDO2 is supposed to provide. Critical reading for any team rolling out passkey authentication, as the gap between theoretical security and practical deployment is wider than commonly assumed.