{"id":7046383,"date":"2026-08-24T18:22:54","date_gmt":"2026-08-24T18:22:54","guid":{"rendered":"https:\/\/peraltafinancing.com\/business\/investing\/why-do-passkeys-prevent-phishing-oblivious-investor\/"},"modified":"2026-08-24T18:22:54","modified_gmt":"2026-08-24T18:22:54","slug":"why-do-passkeys-prevent-phishing-oblivious-investor","status":"publish","type":"post","link":"https:\/\/fivemor.com\/?p=7046383","title":{"rendered":"Why Do Passkeys Prevent Phishing? \u2014 Oblivious Investor"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<p>A reader writes in, asking:<\/p>\n<blockquote>\n<p>\u201cYou have said, and I have read elsewhere also, that passkeys are \u2018phishing resistant.\u2019 I\u2019m ready to believe that, because everybody \u2018in the know\u2019 says so, but I haven\u2019t really been able to wrap my head around WHY that\u2019s the case. Is that something you could write about?\u201d<\/p>\n<\/blockquote>\n<p>Broadly speaking, phishing happens in either of two ways:<\/p>\n<ol>\n<li>You somehow end up on a malicious website (one designed to <em>look like<\/em> your bank, email provider, etc.), and you don\u2019t realize it\u2019s not the real deal. So you enter your login credentials to sign in, and now the bad guy has collected those credentials.<\/li>\n<li>As part of a communication (e.g., a text or phone call from the bad guy, who convinces you that they work at your bank or some other place where you have an account), you are tricked into sharing your login credentials (e.g., sharing them by text or stating them over the phone).<\/li>\n<\/ol>\n<p>Passkeys are inherently strong against both of those types of attacks.<\/p>\n<h3>Phishing via Malicious Website<\/h3>\n<p>Passkeys are <strong>domain-bound<\/strong>, which means that when you create a passkey, saved as a part of that passkey is the specific domain that it\u2019s used for. For example, if you bank with Chase, and you create a passkey while signed in on Chase.com, that passkey is specifically bound to the domain Chase.com.<\/p>\n<p>So if you someday unknowingly end up on a malicious website that is designed to <em>look<\/em> like Chase.com, your passkey simply won\u2019t work. The \u201caccidentally enter your login credentials into a malicious website\u201d scenario simply doesn\u2019t exist with a passkey in the way that it does with a password.<\/p>\n<p>Note, however, that if you have a website for which you can sign in via passkey\u00a0<em>or<\/em> via password, then just because you\u00a0<em>have<\/em> a passkey doesn\u2019t mean you\u2019re now invulnerable to being tricked into entering your password into a malicious website.<\/p>\n<p>But even still, the passkey provides some useful protection. If you normally sign in with a passkey, and one day that passkey does not load, do not assume that your passkey \u201cisn\u2019t working\u201d and that you should enter your password instead. Rather, treat your passkey not loading as a <em>valuable and critical signal<\/em> that you might be on the wrong website. Rather than entering your password, it\u2019s probably best to start over: in the location bar of your browser type the known URL of the website you\u2019re intending to visit (or use a bookmark). To be clear, passkeys <em>can<\/em> sometimes fail to load for benign reasons, but the safe response is the same either way: re-navigate to the website via a known-safe method.<\/p>\n<h3>Phishing via Malicious Communication<\/h3>\n<p>In normal usage, the user doesn\u2019t actually <em>see<\/em> the secret part of the passkey (i.e., the private key of the private\/public key pair). It\u2019s saved in your password manager (or on a security key such as a YubiKey). And when you click a button to log in with a passkey, all of the magic (i.e., your device accessing your private key, using it to create a digital signature, and sending that digital signature to the website you\u2019re logging into) happens behind the scenes, out of the user\u2019s view. The user doesn\u2019t even\u00a0<em>have<\/em> an easy way (or, in some cases, <em>any<\/em> way) to share the secret part. And if you don\u2019t have a way to share it, you can\u2019t be tricked into sharing it with a bad guy.<\/p>\n<\/div>\n<div>\n<p>Among people who read personal finance books, many save a high percentage of their income through most of their careers. One thing that eventually happens for some such people is that they reach a point at which they realize they have not only saved &#8220;enough,&#8221; they have saved &#8220;more than enough.&#8221; Their desired standard of living in retirement is well secured, and it\u2019s likely that a major part of the portfolio is eventually going to be left to loved ones and\/or charity. And that realization raises a whole list of new questions and concerns.<\/p>\n<p>This book\u2019s goal is to help you answer those questions.<\/p>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"<p>A reader writes in, asking: \u201cYou have said, and I have read elsewhere also, that passkeys are \u2018phishing resistant.\u2019 I\u2019m ready to believe that, because everybody \u2018in the know\u2019 says so, but I haven\u2019t really been able to wrap my head around WHY that\u2019s the case. Is that something you could write about?\u201d Broadly speaking, [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[96],"tags":[13177,14955,208928,16082,16371],"dealstore":[],"offerexpiration":[],"class_list":["post-7046383","post","type-post","status-publish","format-standard","hentry","category-investing","tag-investor","tag-oblivious","tag-passkeys","tag-phishing","tag-prevent"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Why Do Passkeys Prevent Phishing? \u2014 Oblivious Investor - Som2ny Network<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fivemor.com\/?p=7046383\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Why Do Passkeys Prevent Phishing? \u2014 Oblivious Investor - Som2ny Network\" \/>\n<meta property=\"og:description\" content=\"A reader writes in, asking: \u201cYou have said, and I have read elsewhere also, that passkeys are \u2018phishing resistant.\u2019 I\u2019m ready to believe that, because everybody \u2018in the know\u2019 says so, but I haven\u2019t really been able to wrap my head around WHY that\u2019s the case. Is that something you could write about?\u201d Broadly speaking, [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fivemor.com\/?p=7046383\" \/>\n<meta property=\"og:site_name\" content=\"Som2ny Network\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-24T18:22:54+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fivemor.com\/?p=7046383#article\",\"isPartOf\":{\"@id\":\"https:\/\/fivemor.com\/?p=7046383\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\/\/fivemor.com\/#\/schema\/person\/b85e3c3dc0e1daea076524dc8810c371\"},\"headline\":\"Why Do Passkeys Prevent Phishing? \u2014 Oblivious Investor\",\"datePublished\":\"2026-08-24T18:22:54+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fivemor.com\/?p=7046383\"},\"wordCount\":716,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fivemor.com\/#organization\"},\"keywords\":[\"Investor\",\"Oblivious\",\"Passkeys\",\"Phishing\",\"Prevent\"],\"articleSection\":[\"Investing\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fivemor.com\/?p=7046383#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fivemor.com\/?p=7046383\",\"url\":\"https:\/\/fivemor.com\/?p=7046383\",\"name\":\"Why Do Passkeys Prevent Phishing? \u2014 Oblivious Investor - Som2ny Network\",\"isPartOf\":{\"@id\":\"https:\/\/fivemor.com\/#website\"},\"datePublished\":\"2026-08-24T18:22:54+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fivemor.com\/?p=7046383#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fivemor.com\/?p=7046383\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fivemor.com\/?p=7046383#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/fivemor.com\/?bp_activities=1\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Why Do Passkeys Prevent Phishing? \u2014 Oblivious Investor\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fivemor.com\/#website\",\"url\":\"https:\/\/fivemor.com\/\",\"name\":\"Som2ny Network\",\"description\":\"Daily Deals\",\"publisher\":{\"@id\":\"https:\/\/fivemor.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fivemor.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/fivemor.com\/#organization\",\"name\":\"Som2ny Network\",\"url\":\"https:\/\/fivemor.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/fivemor.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/fivemor.com\/wp-content\/uploads\/2026\/07\/4a0953c4-logo-300x86-1.png\",\"contentUrl\":\"https:\/\/fivemor.com\/wp-content\/uploads\/2026\/07\/4a0953c4-logo-300x86-1.png\",\"width\":300,\"height\":86,\"caption\":\"Som2ny Network\"},\"image\":{\"@id\":\"https:\/\/fivemor.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/fivemor.com\/#\/schema\/person\/b85e3c3dc0e1daea076524dc8810c371\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/fivemor.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/729ae85bf62b9917e93538db2f2688ca?s=96&r=g&default=https%3A%2F%2Ffivemor.com%2Fwp-content%2Fplugins%2Fbuddypress-first-letter-avatar%2Fimages%2Fdefault%2F96%2Flatin_a.png\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/729ae85bf62b9917e93538db2f2688ca?s=96&r=g&default=https%3A%2F%2Ffivemor.com%2Fwp-content%2Fplugins%2Fbuddypress-first-letter-avatar%2Fimages%2Fdefault%2F96%2Flatin_a.png\",\"caption\":\"admin\"},\"sameAs\":[\"https:\/\/fivemor.com\"],\"url\":\"https:\/\/fivemor.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Why Do Passkeys Prevent Phishing? \u2014 Oblivious Investor - Som2ny Network","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fivemor.com\/?p=7046383","og_locale":"en_US","og_type":"article","og_title":"Why Do Passkeys Prevent Phishing? \u2014 Oblivious Investor - Som2ny Network","og_description":"A reader writes in, asking: \u201cYou have said, and I have read elsewhere also, that passkeys are \u2018phishing resistant.\u2019 I\u2019m ready to believe that, because everybody \u2018in the know\u2019 says so, but I haven\u2019t really been able to wrap my head around WHY that\u2019s the case. Is that something you could write about?\u201d Broadly speaking, [&hellip;]","og_url":"https:\/\/fivemor.com\/?p=7046383","og_site_name":"Som2ny Network","article_published_time":"2026-08-24T18:22:54+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fivemor.com\/?p=7046383#article","isPartOf":{"@id":"https:\/\/fivemor.com\/?p=7046383"},"author":{"name":"admin","@id":"https:\/\/fivemor.com\/#\/schema\/person\/b85e3c3dc0e1daea076524dc8810c371"},"headline":"Why Do Passkeys Prevent Phishing? \u2014 Oblivious Investor","datePublished":"2026-08-24T18:22:54+00:00","mainEntityOfPage":{"@id":"https:\/\/fivemor.com\/?p=7046383"},"wordCount":716,"commentCount":0,"publisher":{"@id":"https:\/\/fivemor.com\/#organization"},"keywords":["Investor","Oblivious","Passkeys","Phishing","Prevent"],"articleSection":["Investing"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fivemor.com\/?p=7046383#respond"]}]},{"@type":"WebPage","@id":"https:\/\/fivemor.com\/?p=7046383","url":"https:\/\/fivemor.com\/?p=7046383","name":"Why Do Passkeys Prevent Phishing? \u2014 Oblivious Investor - Som2ny Network","isPartOf":{"@id":"https:\/\/fivemor.com\/#website"},"datePublished":"2026-08-24T18:22:54+00:00","breadcrumb":{"@id":"https:\/\/fivemor.com\/?p=7046383#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fivemor.com\/?p=7046383"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fivemor.com\/?p=7046383#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/fivemor.com\/?bp_activities=1"},{"@type":"ListItem","position":2,"name":"Why Do Passkeys Prevent Phishing? \u2014 Oblivious Investor"}]},{"@type":"WebSite","@id":"https:\/\/fivemor.com\/#website","url":"https:\/\/fivemor.com\/","name":"Som2ny Network","description":"Daily Deals","publisher":{"@id":"https:\/\/fivemor.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fivemor.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/fivemor.com\/#organization","name":"Som2ny Network","url":"https:\/\/fivemor.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/fivemor.com\/#\/schema\/logo\/image\/","url":"https:\/\/fivemor.com\/wp-content\/uploads\/2026\/07\/4a0953c4-logo-300x86-1.png","contentUrl":"https:\/\/fivemor.com\/wp-content\/uploads\/2026\/07\/4a0953c4-logo-300x86-1.png","width":300,"height":86,"caption":"Som2ny Network"},"image":{"@id":"https:\/\/fivemor.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/fivemor.com\/#\/schema\/person\/b85e3c3dc0e1daea076524dc8810c371","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/fivemor.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/729ae85bf62b9917e93538db2f2688ca?s=96&r=g&default=https%3A%2F%2Ffivemor.com%2Fwp-content%2Fplugins%2Fbuddypress-first-letter-avatar%2Fimages%2Fdefault%2F96%2Flatin_a.png","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/729ae85bf62b9917e93538db2f2688ca?s=96&r=g&default=https%3A%2F%2Ffivemor.com%2Fwp-content%2Fplugins%2Fbuddypress-first-letter-avatar%2Fimages%2Fdefault%2F96%2Flatin_a.png","caption":"admin"},"sameAs":["https:\/\/fivemor.com"],"url":"https:\/\/fivemor.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/fivemor.com\/index.php?rest_route=\/wp\/v2\/posts\/7046383","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fivemor.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fivemor.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fivemor.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fivemor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7046383"}],"version-history":[{"count":0,"href":"https:\/\/fivemor.com\/index.php?rest_route=\/wp\/v2\/posts\/7046383\/revisions"}],"wp:attachment":[{"href":"https:\/\/fivemor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7046383"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fivemor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7046383"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fivemor.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7046383"},{"taxonomy":"dealstore","embeddable":true,"href":"https:\/\/fivemor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fdealstore&post=7046383"},{"taxonomy":"offerexpiration","embeddable":true,"href":"https:\/\/fivemor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fofferexpiration&post=7046383"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}