In a city-state where millions of daily transactions flow through a single digital identity system, Singapore has taken a quiet but consequential step: extending passkey authentication to Android users, closing a door that traditional passwords and QR codes have long left open to fraudsters. The move, rooted in open cryptographic standards developed by a global alliance of technology powers, reflects a broader human reckoning with the limits of knowledge-based security in an age of sophisticated deception. With phishing losses already falling sharply, this expansion of Singpass passkeys to And