I have many email accounts, and a hacker has locked a passkey and device on my accounts. It started out using the same name as my device, but then I renamed mine and saw it was a different device. I have tried every method through Google help to remove this device and the passkey, and nothing works. The passkeys option to remove is missing. I have put a password PIN on Gmail and changed passwords. I've logged out, removed from the account, logged in from different browsers, etc., a couple of times. I was able to use the "Find My Phone" app, and it showed different addresses. I was able to rename his device to something else so I can see it on my account. I don't know what else to do. He has opened other accounts in my name and linked them to mine, changed passwords, accessed my cloud email, social media, bank info, personal information, and who knows what else. I've canceled what I can. I'm backing my info up now. When I delete my Google accounts, he recovers them. I found out by logging back into them that they are still open. He redirected my recovery codes to those accounts, so I can't get them. He's blocked my live chats, so I can't get help. Right now, my plan of action is to back up my files, photos, and contacts. Delete all my accounts, RESET my phone, and hope this works. Will this be enough? He has all my Device Info and even my address. If I could delete the devices and passkey, would that sever the connection? I'm open to any help or advice! THANKS!

I was trying to enable the passkey feature but I get an error message that says that the encrypted data on this device is locked. I'm not sure what it means, I have read that usually the password manager has this issue but I'm able to access without issues.

In my opinion it's not so much Android question despite I have an Android phone related to the problem but rather Google Chrome browser settings issue but my question initially posted in Superuser got downvoted and then closed right after and I was told to ask it here by the moderator... **Problem:** I'm unable to authenticate to AWS web console in Google Chrome browser due to browser forcibly asking me a Passkey which I don't have. I can't also set it up due to owning a not compatible Android phone. I literally am switching browser just to login to AWS atm. Rarely but persistently in every few months I have a situation where Google Chrome starts asking for Passkey when I try to log into my AWS Console in browser. Meanwhile when I'm asked for passkey then there is no place in AWS login-view to use password instead. AWS at the moment has the "old login" and "new login" views possible and both act the same- I am asked for passkey without possibility to use password instead. After clicking "Cancel", I'm just displayed with "Troubleshoot MFA " link which forwards me to AWS documentation and it does not help me or possibility to "Cancel" the authentication, which forwards me back to the AWS Console login form again. **What I've tried:** 1. I read the AWS documentation given in the link above- no help 1. I have tried the setting described in this Google forum post but this didn't change my situation at all, even after restarting the browser. 1. In my phone settings I checked "Devices & sharing" -> "Passkey linked devices" and it was empty. Just to be sure I "Cleared" the device list still. No change in AWS login after that though- still demanding the Passkey. Changing my phone isn't an option to start forcibly using passkeys. I have 2FA setup anyway through my external device. How to turn off this aggressive Passkey requirement from Google for AWS (or any other service's authentication)?

If I use Passkeys, do I need to enable 2fa and mfa or a physical security key?

I have the passkey enabled for my Google account and, so, for my Samsung device. The problem is that if I try to log in through MS Edge, it displays the QR code, I scan the code (FIDO:/XXXXXXX) but on the device, all is blocked (in fact I can see that Google Play services is opened, but nothing happens). Does anyone know if the problem is on my side or what?

I have an old Android device that I sometimes use. Presumably it is full of critical security holes, but the value I get from using it is much less than the cost of a newer device, especially since said newer device will be in exactly the same situation a few years after I buy it. I noticed today that this old device has an entry for an "Automatically created passkey" at https://g.co/passkeys I think this means that Google is trusting this device to hold a cryptographic secret that would let *more* devices log into my Google account. How do I communicate to Google that this device is untrustworthy, and revoke its stored passkey? (And also probably disable sign-in-via-notification on the device?) Can I clear the keys from the device somehow or will it just make more? Is the only way to prevent Google from trusting the device to authenticate new sessions to sign the device out of my account completely?

Webauthn passkey support is mainstream as of Chrome 108. How do I generate a Google passkey using my android device?