Blog

For those unaware, iCloud Private Relay is not a VPN and it only protects the IP address of the users in Safari. On the other hand, VPN protects all traffic from your device by running at the system level. The researchers wrote, ‘In a quirk of how passkeys work — a broadly secure alternative to usernames and passwords which use the WebAuthn standard — a user’s device makes a web request outside of the browser itself. Meaning, that request essentially bypasses Private Relay and exposes a user’s real IP address, even though to them it may look like they are simply interacting with a website as normal.