Google Workspace threat report

Security researchers disclosed techniques called Pass-ta-key that can bypass biometrics protections in Google Password Manager, potentially allowing attackers to hijack the password manager and steal passkeys and stored credentials. The research was published on August 4, 2026.

• Experts reveal Google Password Manager can be hijacked to let ha(opens in a new tab)
• Malware Can Steal Google’s Synced Passkeys Without Password or F(opens in a new tab)