Passkeys are a new authentication solution that aims to eliminate passwords and their vulnerabilities, and most major online services support them. However, online services typically also offer legacy authentication methods (like passwords and multi-factor authentication) and fallback methods (like password recovery via email). This has a major impact on the security and recoverability of online accounts. The thesis aims to analyze these issues. The work might include the following tasks:
- Investigating how passkeys are integrated into the authentication system of online services
- Analyzing the security and recoverability implications of the different authentication and fallback methods.
- Building a proof-of-concept to illustrate the implications for the user.
If you are interested in this topic or have any questions, please contact the supervisor(s) indicated on this page.