Passwordless authentication promises speed, simplicity, and stronger security. But it also changes the threat model. Secrets detection becomes non‑negotiable. Without passwords, your tokens, magic links, and private keys carry all trust. If an attacker gets one, they own the session.
Secrets in code, logs, or config files are a