Magic links, those emailed one-time login links, are annoying and inconvenient for folks who use a password manager, but they radically accept some fundamental truths about signing in for everyone else. By layering passkeys on top of magic links, websites can provide a seamless authentication experience for all users.
Passkeys.directory
A community-driven index of websites, apps, and services that offer signing in with passkeys.
Please, please, please stop using passkeys for encrypting user data
Passkeys are the future of authentication, but using them for data encryption is a disaster waiting to happen. Overloading these credentials creates a dangerous blast radius that can lead to the irreversible loss of a user's most sacred memories and documents.
I don't like passkeys | Ethan Hawksley
Why passkeys are a step back for personal security: examining account lockout risks, platform lock-in, hardware key limits, and fragile recovery flows.
What is EVP? Bridging the remaining gap in the passkey era
How the Email Verification Protocol (EVP) solves passkey fallback and account recovery challenges by bringing phishing resistance to email verification without...
Best Password Manager for Business, Enterprise & Personal | Bitwarden
Bitwarden is the most trusted password manager for passwords and passkeys at home or at work, on any browser or device. Start with a free trial.
Blog | 1Password
Expert articles, security news, product updates, guides, and research from 1Password on password management, privacy, and digital security.
Enpass: Secure Passkey & Password Manager That Keeps Your Data On Your Cloud Storage
With Enpass, choose where your passwords and passkeys are secured and synced – on your personal or business clouds (or even offline). Not on our servers
Keycloak
Keycloak - the open source identity and access management solution. Add single-sign-on and authentication to applications and secure services with minimum effort.
AChep/keyguard-app
A password manager that supports Bitwarden platform and KeePass (KDBX) files. It autofills your logins, supports passkeys, works offline, and runs a Watchtower that finds leaked and reused passwords and other issues.
Introducing Keytrace — Keytrace Blog
Keytrace lets you cryptographically link your atproto/Bluesky account to external accounts across the web.
MCP OAuth: let users trust their own redirect URIs safely
Why MCP servers either refuse custom clients or open a phishing hole, and how per-user trusted redirect URIs, decided at sign-in, give you both.
Pilcrow's auth book
Pilcrow's collection of guides, recommendations, and examples for implementing auth in web applications.
Open Source Password Manager for Teams | Passbolt
Manage and share passwords securely with Passbolt. Open source, audited and built for teams that need collaboration, compliance and control.
Revisiting Keyed-Verification Anonymous Credentials
As part of the Digital Library's transition to Open Access, new features for researchers are available in the Premium Edition. Click here to learn more.
