I’m left with the same questions at the end of that as at the start.
Also, how does OAuth integrate with Passkeys? Because they seem like compatible concepts.
this post was submitted on 21 Feb 2026
6 points (100.0% liked)
cybersecurity
6015 readers
23 users here now
An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!
Community Rules
- Be kind
- Limit promotional activities
- Non-cybersecurity posts should be redirected to other communities within infosec.pub.
Enjoy!
founded 2 years ago
MODERATORS
- you use passkey on the auth server , like you would usually do your password (or in addition to your password if you use webauthn as second factor)
- (optional) you use passkey/webauthn as a as second factor on your actual service, in addition to the oaouth token. very few services support this.