Web Security · Senior · Question 35 of 75
Why are passkeys (WebAuthn) resistant to phishing?
- ✓Correct answer: The credential is bound to the site's origin, so the browser won't use it on a look-alike domain
- 2Because passkeys are longer than passwords
- 3Because passkeys are sent by SMS
Explanation
Even a perfect copy of the login page on another domain gets nothing usable. One-time codes, in contrast, can be relayed in real time.