Recommended Posts

You would of had to have started it - just installing the package does not start it, and there are 2 versions of it - atleast on the 2.0 branch there is a

squid 2.7.9_4

squid3 3.1.9

I can fire up a 1.2.3 branch virtual to take a look what might be going on..

You would of had to have started it - just installing the package does not start it, and there are 2 versions of it - atleast on the 2.0 branch there is a

squid 2.7.9_4

squid3 3.1.9

I can fire up a 1.2.3 branch virtual to take a look what might be going on..

There was only one branch on mine, i am sure it was squid 2.7.9_4 but i would need to 10000% check.

I reckon i might need to start it up... :blush:

Also Neowin Search is not working for me today, keep getting DB errors, you don't know where that BBC.co.uk article is do you?

Here is the thread about blocking bbc.co.uk he was trying to do it with host files and dns, etc. Which you just can not do for what he wanted which was blocking /news not the entire domain

https://www.neowin.net/forum/topic/975926-cannot-banblock-bbc-news-site/

Its a bit long - but I followed up with how to do it with squid and squidguard and showed it blocking the /news -- read through it, we got on a side track of using a firefox addon to block specific urls, he was just looking to block himself from accessing sites ;) (no willpower)

The thread got on a few different tangents on what can and can not be blocked with dns, in the end what he wanted was specific URL blocking - which you need a proxy, etc.

Here is link to last post where I show it blocking exactly what he wanted and what I installed on pfsense and the rule I created to block /news and how you could still access main site but not /news

https://www.neowin.net/forum/topic/975926-cannot-banblock-bbc-news-site/page__view__findpost__p__593706004

Here is another thread where I show output of the lightsquid reporting showing traffic from my wifes machine, etc. When I had it running from the above thread - but have removed it since, when you update pfsense before the RC1 it was reinstalling all the packages took quite a bit of time to have the machine back up and working, etc. So I removed all the packages I really didn't need

https://www.neowin.net/forum/topic/978142-website-tracking/

You can block a specific IP from accessing any specific IP or protocols all together just in the firewall, ie you could say IP 192.168.1.120 can not go outbound on port 80, 443 (http, https) for example in the normal firewall.

You would use squidgard if you want to block on categories or specific urls, but if just want to block all access, or limit access to specific IPs on specific ports this can be done in the normal firewall, you don't need a proxy to do that sort of filtering.

Squid also provides for authing to allow access if you want - and can be setup in a transparent proxy mode where all traffic will flow through it, or have to point the machine to the proxy port on the pfsense box, etc.

What exactly do you want to block or allow? And we can work out the best/easiest way to do that. Be it with normal firewall rules or with proxy.

yeah if your looking to just block based upon domain name, which could be a whole netblock for those types of domains it best to use a url based filter via a proxy vs a firewall rule which would be based upon ip, iprange, protocol, ports, etc.

If you didn't want say 192.168.33.100 to have ANY internet access, then that would be simple firewall rule - deny source 192.168.33.100 dest ANY port http, https

edit: now you could create a alias for the url that should work

post-14624-0-97153100-1300211873.jpg

So if only a few domains you could get by with this I would think.

quick read of the error shows something about blacklist file not being there, did you tell it to use a blacklist without downloading them first?

Let me look at the error again.

When exactly do you get that error, check that enabled, then click apply, then click save.

When i first installed it it said there was no blacklist file available but after reading the wiki today it does say i should of downloaded one from the GUI.

I am downloading one now and will try again in a second to see if that has resolved the error.

:whistle:

EDIT: Error has gone however when i turn on SquidGuard EVERYTHING gets blocked.

I had the same issue with everything being blocked, just with squid installed - went into disk cache and saved, then access control then saved - and working.

before I did that everywhere just sent me to the pfsense page. Uninstall the squidguard until you have squid working.

Like I said im on 2.0 code, I can fire up a 1.2.3 box in virtual later tonight.

Other thing I noticed is Im pointing to my pfsense box as dns. In that alternate dns near the bottom of the page, I point to my pfsense IP for dns 192.168.1.253 in my case.

Squidguard has now been removed i have entered my pfsense ip into that alternate DNS box at the bottom of the page like you said, gone to cache mgmt and SAVED gone to access control and clicked SAVE and now i am here typing this so that appears to be working.

Is there a specific way i can check if Squid is working on it's own before i put squidguard back on?

Rich

Found the problem, when i turn squidguard on it puts this in the custom options on the squid page

If i remove this it works, but my question is what does it do?

redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3

Edit: If you remove this from the custom options SquidGuard changes to STOPPED.

you need those for quidguard to work.. But sure you can block something just in squid to verify its working.

Ok now that you have squid up and running and internet access is working, let me install the squidgard and see whats up with it.

http://doc.pfsense.org/index.php/SquidGuard_package

edit: ok installed the package, went through the instructions for squidguard, not even using blacklists

Then

created custom list,

post-14624-0-17848000-1300224317.jpg

And put in facebook.com and looks what you get

post-14624-0-70146500-1300224307.jpg

  • Like 3

to get blacklist to work, once you have downloaded and picked what categories.. make sure on the bottom of general proxy filter page you put in the location LOCAL

note: bottom of page says

Enter FTP, HTTP or LOCAL (pfSense) URL blacklist archive, or leave blank.

Once you have a black listed loaded under targets you should see all the categories and you can set to block, allow, etc

post-14624-0-91327700-1300224593.jpg

also make sure once you make any changes to anything on the proxy filter to hit the apply button in the general proxy filter page and then save. Working smooth as silk here!

And then sure on the bottom of the proxy server page you should see the custom stuff

redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3

  • Like 2

you need those for quidguard to work.. But sure you can block something just in squid to verify its working.

Ok now that you have squid up and running and internet access is working, let me install the squidgard and see whats up with it.

http://doc.pfsense.org/index.php/SquidGuard_package

edit: ok installed the package, went through the instructions for squidguard, not even using blacklists

Then

created custom list,

post-14624-0-17848000-1300224317.jpg

And put in facebook.com and looks what you get

post-14624-0-70146500-1300224307.jpg

It just isn't working, i disabled the blocklist tried a custom filter everything is blocked.

What is in your custom options?

you have to set default to ALLOW if using squidguard.

post-14624-0-68168700-1300224926.jpg

I posted options off squid page in the post above on an edit.

If you want open up pfsense gui to remote access and PM the details ip and username and pass and will take a look.

  • Like 2
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Microsoft outs Windows 11 KB5095093 with long list of new features by Sayan Sen Microsoft today has released its newest preview update (C-release) for the month of June 2026 under KB5095093, builds 26200.8737 (for Windows 11 25H2) and 26100.8737 (on Windows 11 24H2). The update brings new features across various elements of the OS including the Windows update, the Recovery, Widgets, File Explorer, and more. The full changelog is given below: First up we have the features rolling out gradually: [Point-in-time restore for Windows] New! This flexible recovery feature helps you quickly roll back your PC, including apps, settings, and personal files, to a recent automatic restore point. It helps reduce downtime and simplifies troubleshooting when issues occur. To learn more, see Point-in-time restore for Windows. [Windows Update] New! A calendar experience in Windows Update Settings (Settings > Windows Update) lets you pause updates by choosing an end date, for up to 35 days. You can extend the pause by selecting a different end date and re‑pause updates as needed. For more information, see Pause updates in Windows. [Widgets] New! A quieter, more focused Widgets experience helps reduce interruptions and improves default settings and notification controls: Reduce distractions: Widgets no longer open on hover. Notifications and taskbar badges are minimized by default. Simpler: Open to the Widgets dashboard by default on first use. Customize: Configure Widgets how you want by selecting Settings in the navigation bar, then changing any of the default settings. Stay informed: Dashboard icons show the number of alerts, and badges clear automatically when you leave a dashboard. Adjusted defaults: Some default settings are preserved based on usage, while others adjust to reduce interruptions. Performance improvements: This update provides improved reliability, responsiveness, and visual quality across the Widget experience. [Accessibility] New! This update makes your screen easier to see and customizes your zoom experience: Screen tint: Apply a full-screen color overlay to help reduce eye strain and improve readability. Choose from preset tint options, adjust the intensity, or turn it on automatically. Find this feature in Settings > Accessibility. Magnifier: Enter a zoom percentage directly and change it in increments in the Magnifier window for more precise, flexible control. Magnifier settings menu: You can now also modify zoom increments directly from the magnifier bar instead of navigating to Windows Settings each time. [File Explorer] New! When you hover over a file in File Explorer Home, commands such as Open file location and Ask Copilot appear as quick actions. This experience is now supported for work and school accounts (Entra ID).1 Improves the speed and performance of File Explorer launch.2 Fixes an issue where the OneDrive shortcut in File Explorer stops working when File Explorer is run with administrative mode. The address bar now supports paths containing double backslashes and quotation marks (for example, C:\\Users\\user or "C:\Users\user"), improving compatibility with a wider range of inputs. The address bar suggestion dropdown is more reliable and now consistently closes after an item is selected. This update addresses an issue on File Explorer Home where OneDrive files could appear duplicated in the Favorites section. This update includes several refinements to the Rename experience: Addresses an issue where text was repeatedly selected when renaming items in folder views. Addresses an issue where case-only name changes were not immediately reflected in folder views for items stored locally or in the cloud. [Bluetooth] This update improves reliability and performance when connecting to and using Bluetooth devices: New! Windows now keeps the microphone mute state in sync between the audio mixer and the Hands-Free Profile (HFP) for a more consistent experience with Bluetooth headphones with mute buttons or indicators. Accessory compatibility workarounds: Improves compatibility with specific Bluetooth audio devices, helping AirPods appear faster in pairing mode and improving microphone reliability on Beats Studio Pro headphones. Bluetooth audio stability: Improves overall Windows stability with certain PC manufacturer drivers (error code 0x9F). Improves Bluetooth reliability for voice calls when using Classic Audio devices with the Hands-Free Profile (HFP). Reduces time for LE Audio accessories to start playing audio while using the microphone. Device management: Windows will no longer show a “Remove failed” message when attempting to remove Bluetooth devices if the Bluetooth radio is unavailable or has changed since pairing. Settings experience: Improves stability when using the Bluetooth & devices settings page for a smoother, more consistent experience. Connection reliability and responsiveness: Reduces the time it takes for classic Bluetooth audio devices to reconnect after Windows resumes from hibernation. Improves reliability when LE Audio accessories disconnect, such as when another device (for example, a phone) connects. Improves reliability of LE Audio streaming after a connection is lost and restored. [Bluetooth and Phone Link] This update improves audio routing for calls made through a connected phone: When an outgoing call is dialed from a paired phone, audio remains on the phone while ringing and transfers to the PC only when the call is answered from the PC. When Do Not Disturb is enabled on Windows, incoming call audio from a paired phone no longer rings on the PC. [Voice access and voice typing] New! You can now use voice access and voice typing in French, German, and Spanish. As you speak, your PC improves your text in real time. It corrects grammar, punctuation, and recognition errors, and helps improve clarity—even in the presence of background noise. This makes dictation smoother and reduces the need for manual edits.3 [Audio] This update improves the reliability of the inbox HD Audio driver. [Taskbar] This update improves the reliability of opening the Start menu when selecting the left edge of the taskbar when the icons in the taskbar are left-aligned. [Networking] This update includes networking improvements for virtualized environments. Confidential Virtual Machines (CVMs) now use SR-IOV hardware acceleration by default for improved network throughput, and a configuration issue in nested Hyper-V virtualization network setup has been corrected to ensure reliable VM network provisioning. This update improves the reliability of the Windows networking stack. It reduces bug checks (blue screen errors) related to Wi-Fi power and improves cellular (WWAN) connectivity, including support for IPv6 VPNs. Compatibility with third-party VPN software and SR-IOV configurations on server hardware is also improved. Network adapter settings and bindings are now preserved across OS upgrades. [Printing] New! New printer installations use Internet Printing Protocol (IPP) by default when supported, simplifying setup and improving reliability. For details about third-party driver deprecation, see End of Servicing Plan for Third-Party Printer Drivers on Windows. To control this behavior, use the toggle in Settings > Bluetooth & devices > Printers & scanners > Default install printers using Windows Ready Print. For more information, see Introducing Windows Ready Print and modernized driver selection. For more information, see Introducing Windows Ready Print and Modernized Driver Selection. [Windows Subsystem for Linux (WSL)] The update improves usage of WSL in mirrored networking mode with VPNs. [Display and graphics] Improves the reliability of rendering content while scrolling for certain apps spanning across multiple monitors. Improves the reliability and persistence of applying color profiles. [Location services] This update changes how some location settings are displayed in Settings > Privacy & Security > Location to help with clarity. When location services are turned off, settings like Default location and Allow location override don't immediately apply, since location information is not given to apps or services. These settings will now be greyed out when location services are off to reduce confusion over when they take effect. [Search] This update improves the reliability of setting Search related group policies. [Input] New! You can now customize the size of the right-click zone in Settings > Bluetooth & devices > Touchpad. Choose from default, small, medium, or large to control how much of the bottom-right corner responds to a single-finger right-click. This setting is only available on touchpads with a pressable surface. If your device manufacturer provides customization through their own app, a Custom option will appear to reflect those settings. This update improves recognition of English characters when using Japanese handwriting. [General performance] Improves the time to shut down Background Intelligent Transfer Service (BITS) when you turn off your PC. [General Reliability] ​​​​This update improves the reliability of explorer.exe. It addresses issues on the login and lock screens related to third-party credential providers, reduces the probability of taskbar icons appearing as blank gray placeholders, and improves navigation to Home in File Explorer during OneDrive sync. It also improves explorer.exe reliability when switching between desktops, enhances app launch with shell extensions, and using acrylic blur effects in the Start menu, Settings, and the lock screen. [Apps] Resolves an issue where some installers and applications could show unexpected elevation (UAC) prompts after installing KB5089549. [Remote Desktop] This update refreshes the dialog design when you enable Remote Desktop in Settings > System > Remote Desktop. [Graphics Kernel] Improves memory-management policy that allows PCs with more than 32GB of installed memory to run larger local AI models. Up next we have the features under normal rollout: [Secure Boot] With this update, Windows quality updates include additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. Devices receive the new certificates only after demonstrating sufficient successful update signals, maintaining a controlled and phased rollout. [Authentication] This update improves Netlogon secure channel connections between domain controllers, enabling successful connections from member servers to domain controllers set up before 2025. [Emoji Panel Update] The emoji panel (Windows key + period (.)) now uses GIPHY for GIF content following the deprecation of Google’s Tenor API. Starting June 30, 2026, install the latest Windows update to continue using GIFs in the Emoji panel. If you don’t update, you will see a "GIF service is not available" error in the panel. Installing the latest Windows update will restore access to GIFs. [Networking] This update improves how your device connects to shared network resources. Connections used by apps and system features, such as the NetUseAdd function, now work more reliably, including unauthenticated (null session) connections. [Recycle Bin (known issue)] Fixed: This update addresses an issue where the confirmation dialog might display an internal Recycle Bin file name instead of the original file name when permanently deleting a file. This issue might occur after installing the June 2026 security update (KB5094126). [Taskbar] This update improves notification badge display across your apps. Notification counts and badge visuals now update correctly, helping you stay up to date with new activity. You can choose to manually download the update from Microsoft's update catalog website at this link.
    • Hands-on with BOOX Tappy: cute little reading accessory by Taras Buria Page turners are quite popular accessories for e-readers, as they enable a hands-free reading experience, which is particularly useful with large readers featuring 10-inch or larger displays. The BOOX Tappy is a new accessory that was introduced earlier this year, and we took this cute-looking thingy for a spin. The Tappy comes in a small box, with two additional buttons and a user manual. The device is made of glossy green plastic and resembles old appliances from the nuclear age. Material quality is great, and each part feels quite premium. Plastic is high-quality, the switch is nice to flick, and the buttons are not rattly. At the bottom, four rubberized feet prevent slipping when used on a desk. Unfortunately, there are no color options, and the Tappy is only available in green. It looks good, but I wish there were other options as well. There are two removable buttons, an on/off switch, and an LED indicator that displays connection mode, charging status, and more. The buttons resemble those of an old typewriter, with quite a long travel distance and a pleasant clack. In the box, you have four buttons with different icons: heart, coffee, O, and X. You can easily swap buttons by simply pulling them upwards. Tip: buttons come with plastic covers, but they are quite tricky to remove. It is hard to call the Tappy the most ergonomic remote control, but after fiddling with it for a few hours, I managed to find a comfortable hand position. Attaching a lanyard to it can make it more comfortable in use without the fear of dropping it, but unfortunately, the Tappy does not come with one. The Tappy connects via Bluetooth 5.2, and it works in three modes, which you can toggle by pressing and holding both buttons for about five seconds: Reading Mode Multimedia Mode Browsing Mode Next / Previous page Next / Previous Track Up / Down scroll If you pair the Tappy with a BOOX device (I tested it with the BOOX Go 10.5 Gen 2 Lumi), you will get small pop-ups indicating the current mode. Plus, you can customize what each button does when pressed one time, two times, or held for a few seconds. The list of available actions and features you can use is massive, and I like that BOOX lets you map stuff like brightness adjustment, app launching, screenshot-taking, screen rotating, navigation, and more. Note, however, that while you can use the Tappy with other readers, its customization is only available on BOOX devices running firmware version 4.2 and newer. I could not connect the Tappy to my computer (Windows 11 claims a driver error when I try), but it worked with the DuRoBo Krono that I recently reviewed. My Kindle Paperwhite refused to work with the Tappy, though, just like my iPhone. The Tappy uses a non-removable Li-Ion battery, which can be recharged with a Type-C cable. BOOX rates the remote for "weeks of use," and I can say that it indeed has very good battery life. While there are no battery indicators on the remote, you can see the current level in the status bar or in Input settings in the BOOX firmware. After a few days of active use, mine still shows about 95%. Overall, the Tappy left a nice impression. It is well-made, and the integration with BOOX devices is great. I also like that BOOX decided to have some fun with its design and swappable buttons. I cannot say I am a fan of its odd shape, though. Still, I managed to find a way to use it comfortably. And when not in use, it just looks neat sitting on the table doing nothing or serving you as a small clacky fidget. Buy BOOX Tappy - $29.99 on Amazon US As an Amazon Associate, we earn from qualifying purchases.
    • AdGuard Family lifetime deal now only $14.97 by Steven Parker Today's highlighted Neowin Deal comes via our Apps + Software section, where you can get a lifetime subscription and save 91% on a lifetime AdGuard Family Plan. AdGuard is a unique program that has all the necessary features for what they claim to be "the best web experience." The software combines the an advanced ad blocker, a privacy protection module, and a parental control tool—all working in one app. This software deals with annoying ads, hides your data from a multitude of trackers, protects you from malware attacks, and even lets you restrict your kids from accessing inappropriate content. Install AdGuard and see the internet as it was supposed to be: clean and safe. Get rid of annoying banners, pop-ups & video ads once and for all Hide your data from the multitude of trackers & activity analyzers that swarm the web Avoid fraudulent and phishing website and malware attacks Protect your kids online by restricting them from accessing inappropriate & adult content Good to know Family Plan Length of access: lifetime This plan is only available to new users Redemption deadline: redeem your code within 30 days of purchase Max number of devices: 9 Access options: desktop & mobile Software version: AdGuard Family Updates included A lifetime subscription of AdGuard Family Plan normally costs $169.99, but this deal can be yours for just $14.97, that's a saving of $157.02. For full terms, specifications, and license info please click the link below. Get this AdGuard Family lifetime deal for just $14.97 (was $169.99) Although priced in U.S. dollars, this deal is available for digital purchase worldwide. As an online publication, Neowin too relies on ads for operating costs and, if you use an ad blocker, we'd appreciate being whitelisted. In addition, we have an ad-free subscription for $28 a year, which is another way to show support! Support queries If you have queries or need support for any of the Neowin Deals, please use the contact form here. Neowin Deals are managed and sold by StackCommerce who represent Neowin on an affiliate basis. Why we post these deals We post these because we earn commission on each sale so as not to rely solely on advertising, which many of our readers block. It all helps toward paying staff reporters, servers and hosting costs. So for those that keep moaning and complaining, be thankful we're still online for you to even do that. Other ways to support Neowin Whitelist Neowin by not blocking our ads Create a free member account to see fewer ads Make a donation to support our day to day running costs Subscribe to Neowin - for $14 a year, or $28 a year for an ad-free experience Disclosure: Neowin benefits from revenue of each sale made through our branded deals site powered by StackCommerce.
    • Sadly "beats Steam Machine" isn't much of a brag.
    • Passkeys: Think of them like a broken heart necklace. Imagine one of those heart necklaces that breaks into two matching pieces. One person keeps one half, and the other person keeps the other half. With passkeys, the website has one half, and you have the other half. If the website gets hacked and someone steals its half, that stolen piece is useless by itself. It cannot unlock your account without your matching half. This particular heart necklace is one of a kind, there is only one in existence. Your half of the necklace has to be stored somewhere. It might be stored on your phone, tablet, computer, security key, or a password manager that can sync it between all your devices. A security key is a small physical device that you keep with you, kind of like a house key, car key, or flash drive. I would not usually recommend a security key as the first option for the average person. For most people, it is easier to use their phone, computer, or a password manager that can sync passkeys between their devices. A security key is more like a spare key you keep in a safe place, just in case you lose access to your other devices or your password manager. Some security keys plug into your computer. Some plug into your phone or tablet. Some get tapped against your device. The idea is simple: a security key can hold another passkey for the same website. Think of it like creating a second one-of-a-kind heart necklace for the same account. One necklace could be paired with your password manager, while another necklace could be paired with your security key. That means the website has more than one matching half on file. One half matches the passkey in your password manager. Another half matches the passkey stored on your security key. So, if you lose access to your phone, computer, or password manager, you would still be able to log in using the passkey stored on your security key. Think of it like keeping an extra special necklace piece on a tiny keychain, stored somewhere safe. The website still has the matching half for that security key, but your half is safely stored inside the little key. A passkey does not automatically exist on every device you own. It lives wherever you save it. If your half is stored on one device, then that device is the one that has the matching piece. For example, if you create the passkey on your Windows computer and it is only saved to that computer, your iPhone does not automatically have that same half. If you create it on your iPhone and it only stays on that iPhone, your Android phone does not automatically have it either. That is where password managers come in. A password manager can act like a protected jewelry box for your passkeys. Instead of your half of the necklace being locked to only one device, the password manager can securely sync that half to your other approved devices. For example, Apple Passwords and iCloud Keychain can sync passkeys between your Apple devices. Google Password Manager can sync passkeys with your Google account. But password managers such as 1Password and Bitwarden can sync passkeys between everything, your phones, tablets and computers. Now, you might ask: “What happens if I lose access to the device that has my passkey?” That depends on where your passkey was saved and what recovery options the website gives you. If your passkey was synced through a password manager, you may be able to sign in from another device that has access to that same password manager. For example, if your passkey is saved in iCloud Keychain, Google Password Manager, 1Password, or Bitwarden, another approved device may still have access to it. If your passkey was saved only on one phone, computer, or security key, and you lose that device, then you may not have your half of the necklace anymore. In that case, you would usually need to use the website’s backup login or account recovery options. A lot of websites that support passkeys still let you fall back to your regular password. So if you lose access to your passkey, the site may still let you log in with your password, a code sent to your email, a text message, a recovery code, or some other account recovery process. That is convenient, but it is also important to understand: if the website still allows password login, then your password still matters. Passkeys are safer than passwords, but if your account still has a password as a backup, you should still use a strong, unique password and turn on two-factor authentication if the website offers it. This is why it is a good idea to have more than one safe way back into important accounts. For example, you might keep your passkey in a syncing password manager, add a second trusted device, save recovery codes somewhere safe, or set up a backup security key. A passkey is very secure, but just like a real key, you need a backup plan in case you lose access to it. Now, you might ask: “What stops a hacker from copying my half of the necklace?” That’s the important part: your half is protected. It is not something you type in, and it is not something the website gets to keep. Think of your half as being locked inside a tiny safe on your phone, computer, security key, or password manager. That safe only opens when you approve it with your fingerprint, face, PIN, or device password. When you log in, the website does not need to see your half. It only needs proof that your half matches its half. Your actual half is not handed over to the website. This is different from a password. With a password, you type the secret into the website. If you type it into a fake website, the hacker now has it. With a passkey, you are not typing your secret into the website. Your device is proving you have the matching half without giving the half away. That also helps protect you from fake websites. If someone makes a fake login page that looks like the real site, your device can tell it is not the real match. It will not use your passkey there. Now, could someone use your passkey if they stole your device, got into your password manager, or somehow unlocked the safe that holds your half? Yes, that is why your device password, PIN, fingerprint, face unlock, and password manager security still matter. But a hacker cannot just steal your passkey from the website or trick you into typing it into a fake page like they can with a password. That is why passkeys are safer than passwords. The two matching pieces have to come together, like two lovebirds who were once separated and are finally reunited.
  • Recent Achievements

    • One Month Later
      timbobit earned a badge
      One Month Later
    • One Month Later
      nates earned a badge
      One Month Later
    • Week One Done
      Almohandis earned a badge
      Week One Done
    • Rookie
      dorf went up a rank
      Rookie
    • First Post
      mike_rumble earned a badge
      First Post
  • Popular Contributors

    1. 1
      +primortal
      470
    2. 2
      +Edouard
      165
    3. 3
      PsYcHoKiLLa
      106
    4. 4
      Michael Scrip
      87
    5. 5
      Steven P.
      69
  • Tell a friend

    Love Neowin? Tell a friend!