Passkey requests bypass Apple’s IP-masking tool entirely.

Researchers Tommy Mysk and Talal Haj Bakry found that any site supporting passkeys can see a Private Relay user’s real IP; 404 Media independently verified the leak.

Private Relay protects journalists and organizers who rely on it; Apple has not detailed a fix.

Sources: 404 Media