Researchers have discovered how to access passkeys from Google Password Manager. If successful, an attacker can silently access sensitive accounts like email, banking, or social media, potentially locking you out completely. The attack works by forcing your device to re-register with Google. This reveals a master SDS key, which allows the attacker to decrypt all your passkeys, giving them total access to current and future credentials. To stay safe, you must prevent malware infections by keeping your operating system and Google Chrome updated, and monitor your account activity for unrecognized devices.