We use cookies to understand how people use this site (Google Analytics). No personal data is sold — ever. Privacy Policy
🔒 Privacy Policy
Last updated: January 2025. SecurityAnalysts.org is a free community service. We take your privacy seriously — especially on a security site.
What we collect
If you accept cookies, we use Google Analytics to collect anonymous usage data (pages visited, time on site, country). IP addresses are anonymised. We collect no names, emails, or personal details from analytics.
If you submit the contact form or a site suggestion, we receive the information you type. This is stored securely via Formspree and used only to respond to you.
What we never do
We never ask for your passwords
We never sell your data to third parties
We never use your data for advertising profiling
We never store payment details (support payments are handled securely by Ko-fi)
Cookies
We use one category of cookies: analytics cookies (Google Analytics), only if you consent. These are used to understand how many people visit and which guides are most helpful. You can withdraw consent at any time by clicking "Decline" below.
We also use a sessionStorage item (not a cookie) to remember language preferences and consent state within your visit.
Advertising
This site displays adverts served by Google AdSense. Google may use cookies to serve ads based on your prior visits to this and other websites. You can opt out via Google's Ad Settings.
Your rights (GDPR)
If you are in the EU/EEA, you have the right to access, correct, or delete any personal data we hold about you. Contact us at [email protected] for any data requests.
A passkey lets you sign in with your device unlock method: Face ID, Touch ID, fingerprint, PIN, or screen lock. There is no password for a scammer to steal or trick you into typing.
Why passkeys are safer
They only work on the real website or app.
They cannot be phished like passwords.
They protect against reused-password attacks.
They are easier for many people than SMS codes.
Where to start
Turn passkeys on first for Google, Apple, Microsoft, PayPal, Amazon, and any banking or work account that supports them. Keep MFA enabled too unless the platform clearly replaces it with a passkey.
Update your phone/computer first.
Go to account security settings and look for Passkeys or Passwordless sign-in.
Create the passkey on a device you personally control.
Keep recovery email and phone number up to date.
Should you use passkeys?
Yes, for important accounts. The only thing to watch is recovery: if you lose every device that holds your passkeys, you need a working recovery method.