If you think you might have a virus on your PC one of the things you can do to try and find and remove it is to run MRT.exe. MRT.exe stands for Malicious Software Removal Tool. It’s a free Microsoft tool designed to scan for and remove malware from Windows computers. It’s not a replacement for a fully-fledged antivirus program but a supplementary tool designed to remove specific known threats that are widespread. MRT.exe is updated monthly through Windows update. It works in the background of Windows to find threats, but you can run it manually as follows: What to do: Press the Windows Key + R to open the run dialog box. Type mrt and press Enter. Click Yes on the User Account Control (UAC) prompt. The Malicious Software Removal Tool window will appear. Click Next to begin. Now choose a scan type: Either a quick scan, full scan, or customized scan. Click Next to start the scan. Wait for the scan to complete. The tool will display the results, indicating if any malware was detected and removed. Click Finish once the scan is finished. Dominic Bayley / Foundry And that’s it! If MRT.exe doesn’t find anything it doesn’t mean your PC is completely free of malware. Remember, for a comprehensive scan you should be using MRT.exe in conjunction with a proper antivirus tool, like one of the ones we review on PCWorld. Only after both scans can you rest a little easier knowing that your PC may be free of malware. That’s a wrap for this Try This tip. For more PCWorld tips and tricks like this one be sure to subscribe to our PCWorld Try This newsletter. Read...

If you’re reading PCWorld, you probably know that it’s important to keep your PC updated so that security issues are patched. And you probably know the same is true for your phone, and even things like a PlayStation. But don’t forget that your network gear is also, basically, just a bunch of computers. And thank Asus for reminding us, as it patches DSL routers to close exploitable security flaws. Specifically, Asus has issued a firmware update for three models of relatively old DSL routers with combination Wi-Fi functionality: the DSL-AC51, the DSL-N16, and the DSL-AC750. Released in 2015 and 2017, at least as far as I can tell from a quick search, these are fairly straightforward models without super advanced features even for the time. But if you happen to have one in your home, you want to patch that firmware post-haste. They’re susceptible to an authentication bypass vulnerability, as published on the multi-vendor record Common Vulnerabilities and Exposures (CVE) database and spotted by Bleeping Computer. The direct Asus support pages for the DSL-AC51, the DSL-N16, and the DSL-AC750 are there, in the links that I just posted in that sentence. Firmware can be downloaded and applied via the web-based interface for most routers, if it hasn’t already done so automatically or manually applied by downloading the file and then uploading it in the GUI over the local network. What if your router is susceptible to this particular vulnerability, but it’s out of service and not getting patched? Then Asus suggests that you disable basically all advanced functions, including remote WAN access, port forwarding, DNS, VPN server, DMZ, port triggering, and FTP. Which specific older, unsupported DSL routers does this apply to? Don’t ask me because Asus is not saying. I don’t have DSL, but it occurred to me that I don’t know the brand and model of my cable modem or Wi-Fi router off the top of my head. I think I’ll dig into the rat’s nest behind my printer, just so I can write them down somewhere a little more accessible. Read...

It’s been just over a month since Microsoft released Windows 11 25H2 and anyone who wants to install the major Fall 2025 update can do so. But what if you’d rather hold off instead? Turns out, Microsoft is now forcibly installing the big update on Windows 11 PCs running on older versions that have reached end of support. Notably, that means Windows 11 23H2, which officially ended support on November 11th. Anyone who’s still on Windows 11 23H2 will be forced to update their system to Windows 11 25H2. And if you’re somehow still on an even older version, like Windows 11 22H2 or 21H2? Yup, Microsoft is also forcing the update on your system, too. Here’s how the forced update works If you’re currently on a PC running Windows 11 23H2, 22H2, or 21H2, your system will automatically receive the bump up to Windows 11 25H2 via Windows Update. Microsoft will not ask your permission before downloading and installing this year’s big update. This forced update will only be applied to Windows 11 Home and Pro. Windows 11 PCs running Enterprise versions that are centrally managed are exempt. Windows 11 PCs on Education versions—mainly computers in schools and universities—are also exempt. If you’re offered the automatic update, you can set when your system should perform the necessary restart, or you can postpone the update up to a maximum of a few weeks. The update can’t be permanently avoided. Learn more about taking control of Windows updates. Windows 10 users aren’t affected Microsoft is not forcing Windows 11 25H2 (or any other version of Windows 11) on PCs that are still running Windows 10, whether those PCs are enrolled in the ESU program or not. That means if you’re on Windows 10 and are successfully getting extended security updates, you’re safe for now. If you haven’t enrolled in the ESU program yet, your system is at growing risk of malware threats and hack attempts, and you should consider upgrading your PC to Windows 11 or maybe even trying another operating system. Read...

I’m a semi-old, to riff on today’s online parlance. Things have changed a lot since I was young, especially with computers. A lot of advice just isn’t as applicable in quite the same way as it was 20 years ago. And yet what’s old is new again. Because compromised software is becoming a regular problem once more. Infostealers are a kind of malware that capture sensitive information right under your nose. They masquerade as legitimate software, but as you go about your business, the app or browser extension will record your passwords, personal details, and other information needed to take over your accounts. Unlike with many website leaks and breaches, this data always comes to the attacker unencrypted, so they can start using it immediately. How do infostealers end up on a PC? In addition to cracked software, browser extensions and even legitimate apps can end up infected with malicious code.Google Back in the stone age, avoiding infostealing malware was as simple as only buying and downloading official software. That advice still applies today—cracked or pirated apps are one way an infostealer can make its way onto your PC. But these days infostealer malware can also land on your computer through seemingly innocent free software. Think browser extensions that give weather updates or help you select a color palette. It can also appear through formerly legitimate software. Developers can get hacked—or worse, they actually sell their software to a bad actor. An attacker can then add malware to the code and push an update to unsuspecting users. In 2025, we’ve seen this happen not just through browser extensions, but also games on Steam. (And more than once.) How to avoid infostealers The simple advice is to just watch what you download. In practice, that’s more complicated these days because attackers can place an infostealer on your PC in multiple ways. I take a two-pronged approach.  Online applications like Photopea don’t require any downloads, making them a great alternative for installing software to your PC.Photopea First: Be smart about what you download. Who is the developer? How many times has it been downloaded? Who is recommending it? How many reviews does it have? Is it mentioned by reputable online journalists and experts? How often do you see it mentioned in forums and on Reddit during conversations? When reading feedback from other people, trust individuals who back up their opinions with the experiences they’ve had from using the software. Look for a big cross-section of reviewers from all different sources, too. One nice thing about 2025 is that you don’t have to install software to get your usual tasks done. For example, alternatives like Photopea and Canva can make Photoshop unnecessary. If you need specific software, look for discounts. Students in particular qualify for many freebies, like six months of Adobe Express Premium and a year of Microsoft 365. Second: Wipe unused apps and software from your PC. Do this regularly. A legitimate app can’t compromise your system if it’s no longer installed. For games that I may want to play again or are a pain to download, I save the files to an external hard drive before wiping it from my system. (As applicable, I also back up save files.) These steps won’t guarantee your PC won’t ever become infected with infostealers (or other malware). But it reduces the risk. Antivirus software does a great job at catching nasty software, but it’s not failsafe. Read...

At a glanceExpert`s Rating Pros The simplicity of an Xbox All the possibilities of a Windows PC Well-built and comfortable Acceptable performance Cons Just a slight upgrade in performance No case or other accessories Our Verdict It’s not the purely handheld Xbox that many had hoped for, but something better. The simplicity of an Xbox, without losing the flexibility of a Windows PC. The AMD Ryzen AI Z2 Extreme isn’t what I was hoping for, but it does the job. A more comfortable, easier to use, and more affordable handheld choice than the MSI Claw 8 AI Plus. Price When Reviewed This value will show the geolocated pricing text for product undefined Best Pricing Today Best Prices Today: Asus ROG Xbox Ally X Retailer Price Check Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket Asus Rog Xbox Ally X specs: Processor: AMD Ryzen AI Z2 Extreme, 3 x Zen 5 up to 5 GHz, 5 x Zen 5c up to 3.3 GHz NPU: AMD XDNA NPU, 50 TOPS Graphics: AMD RDNA 3.5, 16 CU Memory: 24 GB lpddr5x Storage: 1 TB SSD, micro-SD slot Display: 7-inch glossy IPS, 1920 x 1080p, 120 Hz, 500 cd/m2 Connections: USB-C 4 with DP 2.1 and PD 3.0, USB-C 3 gen 3 with DP 2.1, headset Wireless: Wi-Fi 6e, Bluetooth 5.4 Operating system: Windows 11 Home Battery: 80 Wh, 2 hrs (high load, high brightness, 120 Hz) to 19 hrs 40 mins (low load, low brightness, 60 Hz) Size: 11.45 x 4.78 x 1.99 inches Weight: 1.58lbs The two new handheld gaming computers from Asus, the ROG Xbox Ally and the ROG Xbox Ally X, have been the focus of a lot of controversy. Most of it has to do with the name. They are called Xbox, and are promoted by Microsoft as an Xbox. But they cost much more than the desktop consoles do. “It’s too expensive!” xbox fans shout, complaining about Microsoft, which shrugs it off by saying that Asus sets the prices. As a PC-based gamer, I look at the fuss and don’t get it. Is this expensive? The top-of-the-range ROG Xbox Ally X that I tested here is not expensive compared to other handheld gaming PCs. It’s almost double the price of its predecessor, but there are clearly more expensive alternatives, and the new model has more memory, double the storage, and of course a new, faster processor. It has the Xbox name, Xbox-style gamepad, a separate Xbox button, and an Xbox interface. But it’s a regular, compact Windows 11 PC just like all the other handheld gaming PCs from Asus, Lenovo, and MSI—and costs accordingly. Well-placed and well-built buttons.Mattias Inghe More than just Xbox In the Xbox app, running in a new “Full Screen Experience” mode, you can buy Xbox games or sign up for Gamepass. It’s not the Xbox dashboard you get on the TV with a console, but the Windows app interface, adapted for mouse control. Regardless, it works well to navigate with the device’s D-pad, trackballs, and buttons. Or with the screen’s pointer. Even though Microsoft has recently raised prices for Gamepass, it’s still a good deal for an active gamer. However, you can jump out of the Xbox box, head over to Windows desktop, and do whatever you want on the computer. Plug in a mouse, keyboard and external monitor and surf the web, stream movies, run Office, talk to Copilot, edit photos, or cut video. Nothing stops it. The big stores are even nicely integrated with the Xbox interface. I tried installing some Steam games and they show up (after a reboot) in the Xbox app under “My Games”. That makes this the only “Xbox” that can run Playstation games that are otherwise console-exclusive to Sony—a potential selling point on its own. 3DMark, installed from Steam, on an Xbox? Yes, it can.Mattias Inghe Well thought out, well built and comfortable Asus and Microsoft have done a great job of kicking you right into the Xbox interface from startup, and after I’m signed up with my Microsoft account, I never really have to leave that interface. There’s a quick panel with performance, light, sound, and screen settings that comes up as an overlay. You can also manage the microphone, Xbox friends list, screenshots, and Gaming Copilot, a beta-stage AI service that will provide strategy tips and recommend new games. The device is built with high quality materials and provides just the right control. Two extra buttons on the back are unusually small, but well placed. The screen, a seven-inch IPS, is sharp, attractive and produces good colors. There’s good contrast, short response times and up to 120Hz frame rate with VRR. Clean and distinct sound from the built-in stereo speakers isn’t bad either. But it could be more powerful. I liked the 8-inch MSI Claw 8 AI Plus I tested this spring, but it has a few more pixels to push on its 1200p screen, which affects performance slightly. And it’s a heavier and clunkier machine, so as a whole I prefer the ROG Xbox Ally X which is lighter and more compact—and more affordable to boot. Most games run smoothly as long as I don’t enable ray tracing. Mattias Inghe Fast enough, but no more So, what about the most important thing, the performance? Is this the handheld gaming machine to beat? Well, AMD Ryzen AI Z2 Extreme gives a slight boost in CPU and graphics performance compared to Ryzen Z1 Extreme, and in some measurements it beats Intel’s Arc solution sitting in MSI Claw 8 AI Plus. But is it enough? When I tested the MSI Claw 8 AI Plus, I complained that a desired performance boost was missing compared to Ryzen Z1 Extreme machines. MSI disagreed and said they had better performance, but the difference is likely due to the games I was testing and not optimizing them with the correct settings. The boost didn’t feel as obvious as two years of development should though. I feel the same here. The Ryzen AI Z2 Extreme performs better in synthetic performance measurements with Geekbench and 3DMark. That makes it a smoother docked desktop PC, but it doesn’t immediately convert to better frame rates in games. But certainly not bad Not that it’s slow. I test a wide range of games from both Steam and Xbox Gamepass, and can fly around throwing copters in Control, hike Night City in Cyberpunk 2077, and ride around the prairie in Red Dead Redemption 2 with acceptable frame rates and stability of 30 fps or more. Nothing for a hardcore PC gamer, but at a stable console level—at least without ray tracing. Less demanding games like Celeste, Hades, and Silksong run with even better results. With Wi-Fi 6e you get a fast connection with little lag, and can stream games via Gamepass Ultimate. Or why not even Geforce Now? As I said, it’s a completely open PC. Not quite the familiar Xbox interface, unless you’re running Xbox on Windows – then you’ll recognize it.Mattias Inghe You can also connect Asus’ external graphics card XG Mobile via usb-4 port if you play with the device docked. Then you can get full Xbox Series X-level performance, and play on a 4K TV with high framerates. But that all costs quite a bit extra. Minimal hassle The CPU cores are more energy-efficient than the previous generation, reducing cooling requirements and extending battery life. Total TDP with the graphics circuit lands between 13 and 25 watts on battery or up to 30 watts with a power adapter. You can seamlessly choose between Turbo, Performance, and Quiet modes, with different energy consumption. You can also quickly and smoothly switch between 720p and 1080p resolution to maximize frame rates in games. It’s one thing that Asus and Microsoft have achieved for Xbox fans: Xbox games are so well customized that the need for settings is minimal. I don’t know if that’s specific to the ROG Xbox Ally X or general to Xbox games on Windows, but it provides a smoother “buy and run” feel than I’m used to. Select the performance mode and resolution in the context menu, and most things are taken care of automatically. The battery lasts between 90 minutes and 5-6 hours depending on the games I play. Especially for less demanding games, it’s clearly more power efficient than previous models. If you want to do something simpler, like streaming a film or surfing, it can last all day without any problems. Obviously, it’s the graphics circuit that saps the most energy. Performance benchmarks: Cinebench 2024, multi-core CPU: 745 pointsCinebench 2024, single core CPU: 113 pointsGeekbench 6, multi-core CPU: 12,885 pointsGeekbench 6, single core CPU: 2,796 pointsGeekbench 6, gpu: 48,463 points3DMark Fire Strike (DirectX 11): 9,183 points3DMark Time Spy (DirectX 12) 4,406 points3DMark Steel Nomad (Vulkan): 777 points3DMark Port Royal (Ray Tracing): 1,978 pointsDisk, read: 3,233.75 MB/sDisk, write: 2,960.25 MB/s Read...

Epic Games recently added support for Arm64 to its Epic Online Services (EOS) developer kit, which means that more games can now be played on computers with Arm-based chips. For example, Fortnite can finally be played on computers with Snapdragon X Plus or X Elite chips without emulation, provided you’re running at least version 38.00 of the game. According to Windows Latest, the game experience on Arm-based PCs is better than expected, but it can lag a bit from time to time. Hopefully Epic Games will be able to optimize further in future updates of Fortnite. PC gaming has long been pretty rough on Arm-based machines and blame has been thrown in every which direction for the state of things, with Arm saying it’s the responsibility of developers. This milestone could end up being a crucial step towards a better PC gaming experience on Arm as a whole, though it is still just one step. Read...

TL;DR: Block ads on nine devices for life with Adguard’s Family Plan, now $19 (reg. $169.99). Ads are a frustrating part of using the internet. They’re also entirely avoidable. If you want to block annoying ads for the whole family (or multiple of your own devices), try AdGuard’s Family Plan while it’s only $18.97 (reg. $169.99). With AdGuard, you get Full ad blocking on sites, videos, and apps on up to nine devices Privacy protection that hides your data from trackers Malware and phishing site detection Parental controls to block adult or unsafe content The Family Plan works on phones, tablets, and computers. It runs on Windows, macOS, Android, and iOS, so you can set it up once and protect the whole household. You only pay once, and the license lasts for life. That means updates, improvements, and protection keep coming without another bill. Use code FAMPLAN to get an AdGuard Family Plan for $18.97. Sale ends November 20 at 11:59 p.m. PT. AdGuard Family Plan: Lifetime SubscriptionSee Deal StackSocial prices subject to change. Read...

Optical drives are still practical for many users, whether to play old CDs and DVDs, install software, or create backups—especially with modern laptops, which are usually supplied without a drive. External drives are the solution for continued access to physical media. The Amicool external CD/DVD drive is currently on sale for close to the lowest price it’s ever been: $20.99 (was $28.99). That’s a smooth 28% discount on a great USB accessory with over 10,000 reviews and a solid 4.3-star rating. It sold over 10,000 units just this past month! See it on Amazon What’s great about this CD/DVD drive? This external CD/DVD drive supports data transfer speeds of up to 5 Gbps, which is great for films, files, or software installations. You can quickly and stably read data and burn media, and it’s compatible with USB 3.0, USB 2.0, and USB 1.0 ports. Power is supplied via the connection, so no separate power supply is needed. Thanks to the plug-and-play design, you don’t have to install any drivers either. Another advantage is its broad compatibility: in addition to Windows versions from XP and later, the drive also supports macOS and Linux. The USB-C adapter (included) allows you to connect it to both conventional USB-A ports and USB-C ports on laptops such as the Macbook Air. The device supports numerous media and writing formats, including CD-R, DVD-R, DVD-RW, DVD-R DL, and DVD-RAM. The physical dimensions are compact, too. Measuring about 5.5 x 5.5 inches with a thickness of 0.67 inches, you can easily stow it in your backpack or laptop bag and use it on the go. Score this CD/DVD drive while you can In the reviews, buyers emphasize the good price-performance ratio and ease of use of this USB-connected drive, with many describing the drive as fast and reliable. If there’s any criticism, it’s usually levied against the drive’s ability to recognize certain computers, which is usually due to insufficient power supply via USB. (According to the manufacturer, a direct connection to the PC instead of a USB hub can solve this.) All in all, the Amicool external CD/DVD drive offers an uncomplicated solution for anyone who wants to continue using CDs or DVDs. It’s darn affordable—especially with this current discount—and it’s suitable for both older PCs and modern laptops. Save 28% on this useful external CD/DVD drive for your computerBuy now on Amazon Read...

While it once scoffed at the possibility of offering an ad-supported tier, Netflix has since embraced the idea, with millions of users snapping up its “Standard with Ads” plan, garnering plenty of interest from Madison Avenue along the way.  Since its arrival nearly three years ago, Netflix has added a variety of features to its ad-supported tier to set it apart from the streaming crowd—and for now, its price remains a fraction of Netflix’s priciest 4K streaming plan.  So, how much does Netflix with ads cost, what’s included, and is anything left out? Here’s what you need to know. How much does Netflix with ads cost? Netflix Standard with Ads costs $7.99 a month, which reflects a buck-a-month price hike that Netflix imposed back in January 2025. For some context, Paramount+ Essential is also $7.99 a month, while Peacock Premium—which, confusingly, is ad-supported—costs $10.99 a month. Meanwhile, HBO Max Basic with Ads goes for $10.99 a month (the same as Peacock Premium) after a recent price increase. Finally, the ad-supported Disney+ and Hulu tiers cost $11.99 a month each following (yet another) recent price hike (they’re considerably cheaper if you bundle them together), So for now, Netflix is tied with Paramount+ for the cheapest ad-supported plan among the biggest streaming services. (There’s also Peacock’s new Select tier, another ad-supported plan that goes for $7.99 a month, but it offers only a “selection” of Peacock’s original content.) How many streams do you get with the Netflix Standard with Ads plan? At launch, Netflix’s ad-supported plan (which was initially called “Basic with Ads”) only offered a single stream. But in 2023, Netflix upped the number of concurrent streams available on the Standard with Ads plan to two. Does Netflix with ads offer 4K HDR video resolution? No, but the video quality of Netflix Standard with Ads has improved since the tier was first launched. While ad-supported Netflix once offered only 720p video quality, it has since been boosted to 1080p, same as Netflix’s ad-free Standard plan. Currently, only Netflix’s priciest plan–Premium ($24.99 a month)–offers 4K HDR streaming, with four concurrent streams per household. Netflix, and most other streamers, reserve their 4K HDR streams for ad-free subscribers, although that’s not a universal policy; Paramount+, for one, does allow ad-supported subscribers to stream in 4K. Does ad-supported Netflix offer downloads for offline viewing? One of the best perks offered by the big streamers is the ability to download videos for offline viewing, perfect for binge-watching your favorite series during a long flight or when you don’t want to bust through your ISP’s (or carrier’s) data cap. Until recently, Netflix didn’t allow its with-ads subscribers to download videos for offline viewing, a restriction shared by the other big streamers. But in November 2023, Netflix reversed course, becoming the first big streaming service to enable offline downloads for subscribers to its ad-supported tier. There is a monthly limit to downloads for Standard with Ads subscribers, however: 15 downloads per device, resetting on the first of each month. How many commercial breaks does Netflix with ads have? Netflix Standard with Ads subscribers will have to sit through 4- to 5 minutes of commercials per hour, with the ads running at the beginning and during videos (ideally during “natural plot breaks”). Each ad will be either 15 or 30 seconds. That 4- to 5-minute-per-hour figure is pretty much in line with Netflix’s competitors. For example, the “with ads” version of Max averages about four minutes an hour, while Peacock tops out at about five minutes per hour. Is Netflix with ads available on all streaming devices? Most devices that work with ad-free Netflix should also support Netflix Standard with Ads, although a “small percentage” of streaming players and TVs won’t work because the device’s Netflix software can no longer be updated. And while the ad-supported Netflix plan wasn’t initially supported on Apple TV streaming devices, it is now (on Apple TV HD devices and later) following an update of the Netflix tvOS app in March 2023. Netflix with ads is also available on most other streaming platforms, including Amazon’s Fire TV, Android and iOS devices, most smart TVs, Mac and Windows computers, and Google TV players. Does Netflix with ads offer the same content as ad-free Netflix? You’ll find almost, but not quite everything. While the “vast majority” of TV shows and movies on Netflix are available for “with ads” viewers, a “small number” are missing because of “licensing issues,” Netflix says. If you do run across a video that’s unavailable on the Netflix Standard with Ads plan, you’ll see a padlock on the title or a “Change plan to watch” banner in place of the standard “Play” button. Why did Netflix launch an ad-supported plan? Netflix lost subscribers during the first and second quarters of 2022, ending a decade of growth and sending Netflix’s stock price into a tailspin. And while Netflix is ubiquitous in North America, it’s having trouble gaining traction in the rest of the world, where it’s facing tough competition from cheaper streaming services. Meanwhile, Netflix’s rapidly growing competitors, including HBO Max, Disney+, Paramount+, Peacock, and Hulu, rolled out their own cheaper ad-supported plans, all of which undercut Netflix’s least expensive ad-free plans. So while it wasn’t all that long ago that Netflix executives scoffed at the idea of cheaper ad-supported plans, the company abruptly changed course when it became clear that its once seemingly unstoppable growth had stalled. In May 2024, Netflix reported that its Standard with Ads tier had roughly 40 million global active monthly users, up from just 5 million users in May 2023. (Netflix has since ceased tallying its monthly user base for the public.) Updated in October 2025 with the latest pricing details and other recent streaming developments. Read...

Everyone knows what a password is. But we can’t say the same for two-factor authentication or passkeys, which is a shame because these two security features dramatically boost the safety of your online accounts. Using both is actually your best bet, but when to use one over the other can be confusing. If you don’t know much about 2FA or passkeys or you’re unsure which is better, this guide should clear that right up. What is 2FA? Two-factor authentication is a second layer of security you add to an account—think of it like another deadbolt on a door. In order to successfully log in, you must verify yourself a second time. Traditionally, a password (your first “factor”) is something you know. Your second “factor” is something you have (like a phone or a security key) or something you are (like a fingerprint). Two-factor authentication methods include one-time-use codes sent via text message or generated by an app, push notifications via phone app, and a hardware security key (e.g., a YubiKey). Hardware security keys like this YubiKey make 2FA very simple.Alaina Yee / Foundry Not all forms of 2FA are equally secure. Text message codes are the weakest due to the security weaknesses of SMS and mobile phone line porting. (For example, text messages can be intercepted via SS7 attacks, while a SIM jack can steal your phone number from under your nose.) Hardware security keys are the strongest. An attacker would need physical access to the dongle to use it. What is a passkey? A passkey is actually a set of encryption keys used for account authentication. It’s a form of asymmetric encryption (aka public-key cryptography) based on the WebAuthn standard. Creating a passkey generates a unique public-private key pair, bound to the device and website it was made for. The website stores the public key. You keep the private key, which always remains secret—though part of the authentication process, it’s never directly shared. It can’t be derived from the public key, either. You can store a passkey in several ways. For more convenience, save them to a cloud-based password manager. Such a service can be the one built-in to your Google or Microsoft account, or an independent company like Bitwarden or Dashlane. For greater security, save them to a specific device like your Windows PC (not your Microsoft account) or a hardware security key. You can secure a passkey in several ways. You can also create more than one passkey for an account, in case you need backup methods of logging in.PCWorld You can create more than one passkey per account. Though each is unique, they still serve as backups for one another—in the sense that if you lose one, you can still log in with a different one. Making more than one passkey to store on different devices is smart, because you can lose a phone or security key, or have your laptop stolen. And recently, the group behind passkeys (the FIDO Alliance) enabled support for passkey transfers—so if supported by your password managers, you can move between ecosystems or services with little hassle.(Currently, only a handful of password managers support passkey portability, with Apple as the biggest participant. But the list continues to expand.) To use a passkey, you must first initiate an authentication request on the site you’re logging into. (Basically, choose the option for signing in with a passkey.) Then you’ll use biometrics like your fingerprint or a PIN to authorize use of your passkey. Security experts consider biometrics more secure, but privacy experts advise a PIN in certain circumstances. (For example, in the United States, the government cannot compel you to share a PIN, but biometric data is not protected in the same way.) So, which is better? Fun fact about passkeys and 2FA—they’re not mutually exclusive! A website or app can choose to allow you to enable 2FA in addition to a passkey for login. However, you won’t find this combination much at all, at least for now. (Amazon is the only major website I’ve seen that still asks for 2FA codes after using a passkey.) If 2FA is enabled, Amazon will still text a one-time use code to your phone after successfully logging in with a passkey.Mark Hachman / IDG Why? A passkey is inherently more secure than a password, since it can’t be stolen or easily shared like passwords. It also blends both information you have (a private cryptography key) and something you are or know (either biometrics or a PIN). Two-factor authentication becomes less necessary to protect against phishing, credential stuffing, and other common attacks that rely on weak or compromised passwords. So our showdown here is more about when best to use one or the either—if you even get the choice. 2FA vs Passkeys: Convenience You can make 2FA pretty seamless — my favorite trick for this is to use a hardware security key and leave it plugged into your PC. Any time you need to authenticate for 2FA, you just touch the key. Meanwhile, a passkey works across all devices without extra setup or purchases, assuming you’re signed up for a free cloud storage service. A Microsoft account will be the most seamless way to get started for PC users, but a Google, Apple, or even Bitwarden account works great too. Ultimately, what’s best for you will be based on personal preference. But for most people, the win goes to passkeys for how cheap (free!) and easy they are to set up and use. Winner: Passkeys 2FA vs Passkey: Security First, so we don’t lose sight of the big picture—any form of two-factor authentication is better than no 2FA. That said, 2FA is only as secure as the method you choose. As mentioned above, text messages (SMS) have exploitable weaknesses. Push notifications are a little better, but they too can be compromised by hackers. If a bad actor knows your password, they can try an MFA fatigue attacks to get into your account—that is, spamming you with successful password use, hoping you accidentally approve a 2FA push notification request during the deluge. I recommend starting with app-generated one-time codes, since they cannot be easily compromised or attacked. But they’re still vulnerable to phishing attacks, where an attacker can steal your 2FA code after you input it into a fake website they control. (This very kind of attack managed to trip up a security guru earlier this year.) The strongest method of 2FA is a hardware security token, which requires human touch to work—and are encrypted in a way not easily compromised. An attacker would need physical access to use such a security key. Meanwhile, for passkeys, its pair of encryption keys are theoretically not crackable by today’s computers. However, storing them in a cloud-based password manager does run a theoretical risk. If that account becomes compromised, your passkeys could be used across the web by the attacker—or ported to another service you don’t control. So in my opinion, this head-to-head works out to a draw. Both of these methods greatly improve security in their own ways, but cannot be compared directly. Also, not all websites support both two-factor authentication and passkeys, so you may not have a choice. I think of these more as complementary security options, rather than head-to-head competitors. That said, if you don’t use strong passwords and will also realistically never turn on 2FA, then passkeys win every time. Winner: Draw 2FA vs Passkey: Price Passkeys are free. The ways you store them may not be. (Maybe you like hardware security keys best.) Many forms of 2FA are free, too. But again, how you approach them could require extra devices. For example, I know individuals who maintain a second cheap cell phone line, used exclusively for 2FA text codes. (Some banks don’t offer other methods of 2FA.) They never share the number, so it can’t be associated with them publicly, and thus minimizes the risk of a successful SIM jacking attack. But paying to use either is optional, even if you don’t own a smartphone. My take? For each person, the winner of this comes down to what forms of 2FA are available to you, your take on security versus convenience, and the supported security features of the websites and apps you use. Plus, how paranoid you are about losing your primary and secondary forms of 2FA or the device(s) with passkeys stored on them. But broadly speaking, I think it’s a draw—convenience and security will play bigger roles in which one you choose. Winner: Draw Read...