Passkeys, a new authentication method, aim to replace traditional passwords

Visualize how passkeys, which rely on asymmetric cryptography to authenticate users, work

After using biometrics or a PIN to access the private key stored on a device, it is combined with a random number generated by the site to produce a cryptographic signature. This signature is verified using the site's public key, allowing a user to log in without entering a password. This reduces the risk of fraudulent messages—phishing attacks—and data breaches.

How hash functions encrypt stored passwords and can be enhanced with 'salt'

Hash functions convert text into unique, random sets of characters, a process that is computationally expensive and time-consuming to undo. Because hashed outputs for many common passwords are publicly listed, some sites use a salt—additional characters appended to a password—before hashing to produce an output that is not known. When entering a password, it is salted and hashed, then checked against the database for a matching hash before permitting login.

Digital passports allow identity verification to be digitized

By scanning the security chip on the back of passports and capturing images or video of a person, apps like Google Wallet and Apple Wallet create a digital version of the document. Some states have also developed their own apps for digital driver's licenses.

Microchips in payment cards improve security by generating unique transaction codes

Magnetic strips store unchanging data that is easily cloned, but microchips act as miniature computers that encrypt sensitive data. They also resist fraud by creating data unique to each transaction, preventing duplication.

Chip technology replaced magstripes to stop easy card cloning and fraud

The magstripe on bank cards always gives the same data, making it simple to copy using a device called a grabber. In contrast, embedded chips create a unique code with every transaction, making it much harder to clone or steal card information.

A mathematical breakdown of how RSA encryption uses prime numbers to encrypt data

This form of asymmetric cryptography uses mathematical functions that rely on the product of two large prime numbers. Because traditional computers struggle to factor such products, obtaining the private keys needed to decrypt messages becomes effectively impossible. This security can be reinforced with larger prime numbers, though this makes encryption more computationally taxing.

Claude Shannon, for whom Anthropic's AI tools are named, proved the existence of an unbreakable cipher

In the one-time pad approach, the encryption key is randomly generated and of equal length to the plaintext. This randomness ensures that every possible plaintext is equally likely—RBBHN can mean HELLO, SOLVE, CODES, and so on, using a different key—while matching the message and key lengths prevents the appearance of patterns that can be exploited.

How quantum computers can empower Shor's algorithm to break digital encryption

Secure communications largely rely on numeric keys generated by multiplying two enormous prime numbers together, and it is computationally impractical to determine these primes by trying to divide by every possible one. While Shor's algorithm can provide better guesses for this brute-force approach, it relies on a number that is difficult to determine on classical computers but much easier to calculate using the simultaneous computations enabled by quantum superposition.

The mathematics of quantum-based cryptography, and why existing data is already at risk

Seeing the potential of this technology, some governments and malicious actors are thought to have already started storing encrypted data, in the hopes that quantum computers within the next 10 to 20 years will be able to decrypt it. As of 2022, the National Institute of Standards and Technology had selected four algorithms for inclusion in a quantum-resistant encryption standard.

The science of cryptography, including methods to encrypt data and how to break encryption

Monoalphabetic ciphers use a set of rules to replace each letter with another consistently, making them susceptible to brute force attacks that try every kind of replacement. While more complex ciphers can transform text in less obvious ways, because certain letters are used more often than others, an analysis of letter frequency may reveal patterns that help uncover the rules that make up a cipher.

View how AES—the global standard for symmetric encryption—works

Established by the National Institute of Standards and Technology in 2001, the Advanced Encryption Standard transforms plaintext into ciphertext using multiple rounds of processing, including substitution, transposition, and mixing. Larger keys undergo more rounds to produce 16-byte blocks of scrambled data, with 256-bit AES keys taking 3.31 × 10⁵⁶ years to decrypt via brute force.

Palm-scanning is the future of digital payments

Owned by Tencent, WeBank was China's first digital bank and services 340 million customers. Leveraging its parent company's technology portfolio, WeBank is determined to make palm-scanning the biometric equivalent of the credit card.

Watch a cybersecurity expert answers questions about hacking

From firewalls and VPNs to ransomware and viruses, IBM Distinguished Engineer Jeff Crume has seen many changes in cybersecurity during his 40 years of IT experience. In this video, he explores some of the most significant hacking events in history and provides advice on protecting yourself online.

Explore a visual guide to how quantum computers can crack RSA encryption

In 1994, Peter Shor introduced an algorithm that showed a quantum computer could efficiently factor the product of two very large prime numbers, undermining the mathematics that makes RSA so secure. While using larger keys can delay the decryption time of quantum computers, this solution increases the time it takes to encrypt data, which may become impractical.

The concept for Palantir's key software came from PayPal's anti-fraud protocol

PayPal, which, like Palantir, was cofounded by Peter Thiel, developed the initial framework for Palantir's data-mining service to prevent financial crime. Following the 9/11 terrorist attacks, Thiel realized the software could also enable government agencies to connect data and prevent similar terrorist attacks from occurring in the future.

Why there are microchips in credit cards

Credit cards have evolved significantly since their invention in 1950, but security lagged in the US for years. Despite handling only a quarter of global transactions, the US once accounted for half of all credit card fraud. The 2013 Target data breach helped push the adoption of chip cards, reducing fraud but shifting risks to online scams.

Worldcoin: the cryptocurrency collecting biometric data

An ambitious project launched by OpenAI's founder Sam Altman, Worldcoin aims to provide a global financial and identity network based on proof of personhood through biometric scanning of individuals' irises.

Create your own cipher by combining mathematical operations and encryption protocols

This tool allows users to build an encryption workflow in which the output of one customizable function becomes the input to another, thereby creating undiscovered methods for obscuring information via a series of ciphers.

A visual guide to how bitcoin transactions work and rely on cryptography

The "crypto-" in cryptocurrencies like bitcoin refers to the mathematical functions that generate pairs of public and private keys and encrypt data in blocks. When combined, these systems secure transactions on the network, verify digital asset and token transfers, and contribute to end-user anonymity.

Contactless credit cards descend from a batteryless Cold War listening device

The same physics that let Soviet spies eavesdrop on the US ambassador in 1945 underlie contactless payment methods today. The device is a passive chip powered wirelessly by incoming radio waves.

Using cryptocurrency to turn traditional financial arrangements on their head

Cryptocurrency is poised to drastically change everything in the financial world, including financial arrangements. Decentralized finance makes it easier for virtually anyone to take advantage of financial markets without the need for a bank. However, there are new risks involved as well. Professor of Legal Studies and Business Ethics Kevin Werbach, an expert on Bitcoin and blockchains discusses it all in detail in The Conversation.

Watch how the Enigma machine encrypts messages and learn about its critical design flaw

Using settings selected from a series of rotors and a plugboard that let operators swap letters with any of their choosing, the machine lit up the output letter for each letter typed. While this system could generate messages requiring any of 150 quintillion potential keys, the machine's reflector never encrypted a letter as itself, providing an entry point for exploiting the system.

Practice encrypting and decrypting text using an online library of ciphers

This tool provides users with customizable protocols, including Caesar, Affine, and Vigenère ciphers, to hide messages in transformed text and convert them back into legible formats. Mechanisms are also available to convert text into other communication languages, such as Morse code and URL encoding.

Fintech could help democratize access to banking

More than 1.3 billion adults worldwide do not have access to basic banking services as of this writing—but some experts believe that the fintech industry can help with that by targeting groups of people who have historically been underserved by traditional banks.

A look at historical ciphers, from the Spartan 'scytale' to the Navajo Code Talkers

From the Greek word for "hidden writing," cryptography in Ancient Greece took the form of batons around which a long strip of leather or parchment was wrapped, after which messages were written. Recipients needed a scytale of the correct width to encircle received ribbons and reveal the message. Members of the Navajo Nation created a code that remained unbroken throughout its use in World War II.

Privacy concerns in the credit scoring system

Because credit scores use a lot of personal information (such as whether or not someone makes credit card payments on time), some worry their privacy is being compromised in the data collection process.

Some argue that advance payday apps aren't markedly different from payday loans

Some apps, like EarnIn, allow users to get money from their paycheck in advance. These apps access users' banking information, allowing the company to immediately take back any borrowed money and track users' financial situations to evaluate their risk. Unlike traditional payday lenders, these apps often waive the right to sue users who don't pay back the initial principal and don't charge interest, but rather ask users for a tip. (Some users may experience a paywall.)

Technical vulnerabilities prevent full-proof anonymity when browsing the dark web

Despite encrypting data and relaying it within the Tor network, traffic between the network exit and the final destination is no longer hidden and can be captured. Law enforcement agencies can also attempt to deanonymize users by monitoring and matching data signal patterns entering and leaving the network via a correlation algorithm.

Private credit is a nonbank loan made directly to a business

Similar to private equity, private credit is part of the private markets world. Both strategies offer illiquid, privately negotiated investments for privately held companies. Unlike private equity investors, however, private credit investors typically do not take ownership stakes in the companies they invest in.

Security technician hacks a voting machine to reveal its vulnerabilities

A technician bought an old, likely-decommissioned voting machine from 2013 and took it apart to see how a would-be hacker might be able to exploit its vulnerabilities. Get a sense of the needs for secure, up-to-date voting machines with this...

AI could be increasing the opportunities for financial fraud

Systems that can reproduce near perfect counterfeits of legitimate financial documents are increasingly prevalent and sophisticated. The international Association of Certified Fraud Examiners estimate organizations lose about 5% of revenue to fraud each year.

How to prepare for cyberattacks

An easy-to-digest checklist on the many ways you want protect yourself from a cyberattack before it happens, if it happens, and after it happens.

Trick an LLM into revealing sensitive information

Even with robust training, large language models may be fooled into providing sensitive information if correctly prompted. In this game, a wizard withholds eight passwords, which you must prompt them to reveal with ever-increasing LLM safeguards.

The basics of private credit—plus why it matters in 2026

This podcast episode—one of the best we found for explaining the ins and outs of private credit—details how private credit became a significant lender for the tech industry, and how AI could disrupt private credit investments.

Fintech relies on technology, not physical location, to serve financial customers

Most of the industry's prominent players were created since 2010, and are still in a growth phase. These institutions have broadly disrupted traditional banking and have pushed physical banking locations toward obsolescence.

China is making a deliberate push toward a cashless society

Riding widespread digital finance apps like Alipay and WeBank, physical cash circulating in China fell under 4% of total money in 2023. The trend reflects the country's drive to be a leader in the future of digital payments.

20 of the most common cyberattacks

While there are dozens of different types of cyber attacks, this article explains the top 20 most common network attack examples, including phishing, whale-phishing, and spear-phishing attacks. Learn how to best protect yourself.

Explore a visual timeline of fintech’s history and growth

From the debut of the world’s first ATM in 1967, to Apple Pay launching in 2014, financial technologies have come a very long way in a relatively short historical period. A colorful visual timeline highlights some of the most important milestones along the way.

Quantum computers harness weird physics to explore unsolvable problems

Classical computers manipulate bits as either 0 or 1, but quantum computers use qubits to hold combinations of both, enabling new algorithms. This new approach could one day help with breakthroughs in medicine, chemistry, and AI.

Explaining how open source systems like Linux can be secure, despite their public source code

While no computer system is immune to all cyberattacks and malware, the transparency of open-source technology means many thousands of developers can review and oversee the underlying code powering the software on an ongoing basis. This increases the likelihood of catching and patching vulnerabilities more quickly than smaller groups of cybercriminals looking to exploit them.

Proof-of-work versus proof-of-stake: what's the difference?

The two main consensus mechanisms—the way blockchains confirm and enshrine information—are proof-of-stake and proof-of-work. An overview compares the differences between the two and the latter's ability to reduce the energy intensity of the computation process, which has emerged as one of the biggest criticisms of the crypto boom.

Modernizing health data privacy: A call for comprehensive reform

Despite the advancements in medical technology and data collection, securing personal health data remains a pressing issue in the 21st century. This Forbes article analyzes the state of health data privacy, sheds light on the current shortcomings,...

Explore the components of autonomous vehicles controls

A suite of cutting-edge hardware and computation-intensive software creates the potential for self-driving cars to be safer, more fuel-efficient, and more accessible to a broader range of drivers. However, automation also introduces potential cybersecurity threats.

The story of Kryptos, the long unsolved cryptographic sculpture outside the CIA's headquarters

Made by American artist Jim Sanborn, the sculpture features four copper plates engraved with messages written with the 26 letters of the Latin alphabet and question marks. The last of these plates was solved in 2025, but the piece remains of interest to cryptoanalysts.

Gas stations top the list of riskiest places to use a debit card

Unlike credit cards, debit cards withdraw funds directly from your checking account, and federal laws provide fewer consumer protections against debit fraud. Gas station "skimmers" and long periods of separation from the card at restaurants are some of the more vulnerable spots for use.

Smart cities without strong cybersecurity can leave utilities extremely vulnerable

Insecure devices connected to the Internet of Things pose risks to the entire network, which cybercriminals can hijack to compromise infrastructure and private resident data. Poorly secured systems that become inoperable can undermine the promise of smart cities by worsening the quality of life.

OSINT: How hackers find their marks

What is OSINT? How do hackers gather intel about targets? Just how much can they learn about you? Learn more as we dig in to the world of OSINT.

Listen to a podcast episode that goes inside the 2017 Equifax credit bureau hack

This podcast episode details a 2017 credit bureau hack in which Equifax data about millions of Americans was compromised. It dives into the history of credit bureaus, specifically how they became legally allowed to access Americans' financial information without Americans actually volunteering it themselves.

A US Department of Defense research lab developed the technology for the dark web

Although encryption existed to mask the content of communications across the internet before the 1990s, those managing overseas network infrastructure could determine a spy's affiliation based on where they saw data sent to and received from. To keep this information secret, the US Naval Research Laboratory developed onion routing, which enabled anonymized web browsing. The release of the technology to the public obscured sensitive communications further by growing the volume of anonymous data.

Peter Thiel and Elon Musk formed PayPal after merging two dot-com companies

Elon Musk cofounded "X.com," an online banking service, in 1999 with the idea that the web would become a financial repository as internet access expanded and became ingrained in daily life. Peter Thiel cofounded "Confinity" as a digital security service that morphed into a payments system. In 2000, the two merged to form PayPal, and in 2002, they sold PayPal to eBay for $1.5B.