WinMagic exposes the fundamental flaw in modern authentication: passkeys secure the login, but attackers have already moved on to sessions, tokens, and transactions. The company introduces Live Key and Live Identity in Transaction (LIT), extending cryptographic protection beyond the login moment to secure the entire session timeline—with zero user friction.
TORONTO, ON, March 9, 2026 /PRNewswire/ — Nearly half of Americans now use passkeys on at least one account, backed by Apple, Google, Microsoft, and the FIDO Alliance. The industry celebrates this shift from passwords to public-key cryptography as a phishing-resistant breakthrough. But while authentication improves, attackers have already moved on. They are no longer stealing passwords. They are targeting what happens after login: session tokens, cookies, and transactions that persist for hours with no continuous verification. Passkeys solve login. They do not solve what follows.
“The entire world verifies one identity and gives access to another,” said Thi Nguyen-Huu, founder and Chief Executive Officer of WinMagic. “You verify the user, then deliver data to the endpoint. That misalignment creates vulnerability.”