Guides about passkeys
7 guides on this topic.
- Choosing toolsHardware security keys: what they are and how they differWhat is a hardware security key? How FIDO2 keys work, what ASD says about backup keys, and how four keys compare on makers' published specifications.
- Protect yourselfHow to secure your online accounts: where to startHow to secure online accounts with passphrases, a password manager and multi-factor authentication, with setup steps for Google, Microsoft and Apple.
- Microsoft 365Microsoft 365 MFA methods compared, from SMS to passkeysPhishing-resistant MFA in Microsoft 365: the sign-in methods Microsoft calls phishing-resistant, those it calls prone to phishing, and ASD's view of SMS.
- Protect yourselfPasskeys explained: what they are and how they workWhat are passkeys? How they work, why they resist phishing, synced versus device-bound passkeys, and how to create one for Google, Microsoft and Apple.
- Cyber threatsPassword attacks explained: credential stuffing, spraying and brute forcePassword attacks explained: credential stuffing, spraying, brute force and phishing, why reuse matters, and the MFA and passkey defences ASD describes.
- Choosing toolsPassword managers: what they are and how they differWhat is a password manager? How they work, what the ACSC says about risks, and how five built-in and standalone options compare on published specs.
- Protect yourselfPlanning account recovery before you need itHow to set up account recovery before you need it: recovery phone, email, backup codes and recovery contacts, with steps for Google, Microsoft and Apple.