Get new articles by email:

Oblivious Investor offers a free newsletter providing tips on low-maintenance investing, tax planning, and retirement planning.

Join over 24,000 email subscribers:

Articles are published every Monday. You can unsubscribe at any time.

Why Do Passkeys Prevent Phishing?

A reader writes in, asking:

“You have said, and I have read elsewhere also, that passkeys are ‘phishing resistant.’ I’m ready to believe that, because everybody ‘in the know’ says so, but I haven’t really been able to wrap my head around WHY that’s the case. Is that something you could write about?”

Broadly speaking, phishing happens in either of two ways:

  1. You somehow end up on a malicious website (one designed to look like your bank, email provider, etc.), and you don’t realize it’s not the real deal. So you enter your login credentials to sign in, and now the bad guy has collected those credentials.
  2. As part of a communication (e.g., a text or phone call from the bad guy, who convinces you that they work at your bank or some other place where you have an account), you are tricked into sharing your login credentials (e.g., sharing them by text or stating them over the phone).

Passkeys are inherently strong against both of those types of attacks.

Phishing via Malicious Website

Passkeys are domain-bound, which means that when you create a passkey, saved as a part of that passkey is the specific domain that it’s used for. For example, if you bank with Chase, and you create a passkey while signed in on Chase.com, that passkey is specifically bound to the domain Chase.com.

So if you someday unknowingly end up on a malicious website that is designed to look like Chase.com, your passkey simply won’t work. The “accidentally enter your login credentials into a malicious website” scenario simply doesn’t exist with a passkey in the way that it does with a password.

Note, however, that if you have a website for which you can sign in via passkey or via password, then just because you have a passkey doesn’t mean you’re now invulnerable to being tricked into entering your password into a malicious website.

But even still, the passkey provides some useful protection. If you normally sign in with a passkey, and one day that passkey does not load, do not assume that your passkey “isn’t working” and that you should enter your password instead. Rather, treat your passkey not loading as a valuable and critical signal that you might be on the wrong website. Rather than entering your password, it’s probably best to start over: in the location bar of your browser type the known URL of the website you’re intending to visit (or use a bookmark). To be clear, passkeys can sometimes fail to load for benign reasons, but the safe response is the same either way: re-navigate to the website via a known-safe method.

Phishing via Malicious Communication

In normal usage, the user doesn’t actually see the secret part of the passkey (i.e., the private key of the private/public key pair). It’s saved in your password manager (or on a security key such as a YubiKey). And when you click a button to log in with a passkey, all of the magic (i.e., your device accessing your private key, using it to create a digital signature, and sending that digital signature to the website you’re logging into) happens behind the scenes, out of the user’s view. The user doesn’t even have an easy way (or, in some cases, any way) to share the secret part. And if you don’t have a way to share it, you can’t be tricked into sharing it with a bad guy.

What Comes After Financial Independence?

Among people who read personal finance books, many save a high percentage of their income through most of their careers. One thing that eventually happens for some such people is that they reach a point at which they realize they have not only saved "enough," they have saved "more than enough." Their desired standard of living in retirement is well secured, and it’s likely that a major part of the portfolio is eventually going to be left to loved ones and/or charity. And that realization raises a whole list of new questions and concerns.

This book’s goal is to help you answer those questions.

More than Enough: A Brief Guide to the Questions That Arise After Realizing You Have More Than You Need

Topics Covered in the Book:
  • Impactful charitable giving
  • Talking with your kids or other heirs
  • Qualified charitable distributions
  • Deduction bunching
  • Donor-advised funds
  • Trusts
  • Click here to see the full list.

Financial Planning Roundup: Long-Term TIPS Yielding 3%

TIPS maturing in 2046 or later are yielding slightly above 3% as of last Friday. (And TIPS maturing 2042-2045 aren’t far below 3%.)

It’s important to understand that interest rates are quite hard to predict. And there’s no rule that says that TIPS yields can’t go meaningfully above 3%. So there’s no way to say, “today is the very best time to buy.” But it is fair to say that “inflation + 3%” is a better expected return from the bond side of a portfolio than has been available for quite some time, without using lower-quality bonds.

Other Recommended Reading

Thanks for reading!

Reducing Spending Throughout Retirement

In a recent paper, David Blanchett found (again) that household spending tends to decrease over the course of retirement. That is, it increases, but not as quickly as inflation. So in “real” terms, it’s gradually going down.

Relative to Blanchett’s earlier work on how retirees change their spending over time, his latest paper had two particularly noteworthy findings.

Median vs Mean

The first especially interesting finding was the difference between the median and mean (average).

For the median retiree, inflation-adjusted spending decreases throughout retirement.

For the average (mean) retiree, however, inflation adjusted spending goes back up at older ages (though it still stays below the initial level of spending).

The difference appears to be significantly due to large health-related costs at older ages, which are included when calculating a mean, but which do not affect the median retiree. For example, as Blanchett writes, “among those who passed away at the age of 95, the median cumulative real lifetime unexpected out-of-pocket medical expenses were only about $50,000 compared to roughly $250,000 at the 95th percentile.”

Reducing Spending by Choice

The second particularly interesting finding is that even households that are “funded or overfunded” still reduce spending. That is, while some retiree households reduce their spending due to limited funds, even households who don’t need to reduce spending nonetheless typically do still reduce spending over time.

As Blanchett writes, “Only those respondents who were the most well-funded and spending at lower levels tended to increase in spending. Average real spending declined for all respondents spending $80,000 or more, regardless of funded status, although spending declines were lower as funded status tended to improve.”

Why People Reduce Spending

To me, it’s not surprising at all to find that people reduce spending over their retirement, even when they aren’t forced to do so.

For example, imagine a world in which there was absolutely no uncertainty. You know exactly what your career earnings and investment returns will be. You know what inflation is going to be. You know exactly how long you (and your spouse, if applicable) will live. You know exactly what your health care costs (and other “lumpy” costs such as home repairs) will be each year.

And so you’re left with some, definitively known, amount of discretionary spending, which you can allocate across the years of your life.

In that world, how would you allocate those dollars, across time?

There’s no right or wrong answer here. But most people would choose to do more discretionary spending in their earlier years and less in their later years, simply because it’s easier to enjoy discretionary spending at a younger age. At 25 it’s easier to have a travel-the-world type of adventure than at 45. It’s easier at 45 than at 65. And it’s easier at 65 than at 85. And the same things goes for most types of discretionary spending. It’s just easier to do it the younger we are.

Some people might choose the classical economics “consumption smoothing” idea of having your spending stay level over time. But it’s hard to imagine many people intentionally choosing an increasing spending path all the way through life (e.g., pinching pennies at age 35 so that you can “live large” at age 85).

Now let’s bring back one type of uncertainty: lifespan. So we’re still assuming no investment risk, no uncertainty as to health care costs or other big expenses. But now we don’t know how long you’ll live. Naturally, that means we need to plan for a scenario where you live longer than your life expectancy, but there’s another aspect here that is often left out. And that is: would you weight earlier years more heavily (i.e., choose to spend more in those years than in the above case) simply because you know you’ll be alive in those years? In other words, separate from the decision you made above about year-by-year spending preferences, when we add longevity uncertainty into the mix, would you now choose to, for example, further shift the spending in the direction of the earlier years, simply because you’re more likely to be alive during those years?

Again, different people will answer differently here. But this factor is either not important to you, or it’s a point in favor of more spending in earlier years. Nobody would say, “I’m less likely to be alive at age 95 than at age 65, and therefore I will plan to allocate more dollars to spending at age 95 than at age 65.”

So we have two factors, both of which point in favor of weighting earlier spending more heavily than later spending (though to differing degrees from one person to another). For most households, that’s broadly the goal that we’re trying to achieve.

“Reducing spending throughout retirement” might sound bad. (And indeed, being forced to do so is probably not what we want.) But “intentionally choosing to spend more in earlier retirement” is another way of saying the same thing, and it is broadly something that people want to do.

Retiring Soon? Pick Up a Copy of My Book:

Can I Retire Cover

Can I Retire? Managing a Retirement Portfolio Explained in 100 Pages or Less

Topics Covered in the Book:
  • How to calculate how much you’ll need saved before you can retire,
  • How to minimize the risk of outliving your money,
  • How to choose which accounts (Roth vs. traditional IRA vs. taxable) to withdraw from each year,
  • Click here to see the full list.

A Testimonial from a Reader on Amazon:

"Hands down the best overview of what it takes to truly retire that I've ever read. In jargon free English, this gem of a book nails the key issues."

Financial Planning Roundup: Vanguard Funds Add “Morningstar” to Their Name

In February of 2026, Morningstar bought CRSP (the Center for Research in Securities Prices), which until that point was owned by the University of Chicago. CRSP was the entity that operated a bunch of the indexes that Vanguard funds tracked.

Earlier this year, Vanguard announced that “Morningstar” would be added to the names of the various funds that track indexes now run by Morningstar (previously run by CRSP). For example, Vanguard Total Stock Market Index Fund would become the Vanguard Morningstar Total Stock Market Index Fund.

On Wednesday of last week, those new names took effect.

Just to be clear, it’s a name change only. Same funds, same indexes being tracked, slightly new name.

Other Recommended Reading

Thanks for reading!

Is a Total Bond Fund Still an Acceptable Core Bond Holding?

A reader writes in, asking:

“I have question about your VT + TIPS choice. Will you maintain that two fund portfolio throughout your life? Was wondering if your choice reflects a personal judgement about holding BND in a portfolio. BND has certainly not been a stellar performer for several years. Makes me wonder if going with TIPS only for the non-stock portion of our portfolio is also the right choice for us. Currently looking at a 50/50 BND/TIPS for fixed income as I start retirement next year, but your choice is making me doubt the wisdom of that approach.”

Bonds can perform two separate roles in a portfolio. In our household, we’re using them in a way that only individual TIPS held to maturity is really the right fit. But if they are being used as basically “the thing that’s less volatile than stocks, which will be rebalanced with the stock part of the portfolio” there are tons of options that would be fine. This article has more on that:

Personally I have no significant qualms about a “total bond market” fund such as BND in that second role. Its performance in recent years is not anything strange or alarming. That’s just what happens when interest rates go up. And they went up, by a lot, from 2021-2022 (especially in 2022). If you find the fund on Vanguard, click to the performance section, then click the tab for “annually,” you’ll see the year-by-year returns. It’s really just those two years (especially 2022 with a -13.15% total return by NAV) that makes all of the performance figures look bad — and it’ll be that way until those years fall out of the various calculations. (Note that the fund’s 3-year performance is much better than 5-year performance for exactly this reason.)

And again, it’s not as if the fund did anything wrong over the 2021-2022 period. BND has an average duration of 5.8 years. That means that for every percentage point change in interest rates for bonds similar to those in the portfolio, the fund’s price should move in the opposite direction by about 5.8%. From the beginning of 2021 to the end of 2022, yields on 7-year Treasury bonds went from 0.64% to 3.96%, an increase of 3.32%. Multiplied by an average duration of 5.8, we’d expect a price decline of about 19% over the period, offset somewhat by the fund collecting some interest over those two years. (Also note that the fund holds corporate bonds as well as government-backed bonds, so the change in yield was a bit different than we see here.)

Essentially, any intermediate-term bond fund (and especially long-term bond funds) had a terrible year in 2022. That’s just the math of what happens when yields go up. For instance:

  • Vanguard Intermediate-Term Treasury ETF was down by 10.67% in 2022.
  • Vanguard Inflation-Protected Securities Fund was down by 11.85%.
  • Vanguard Intermediate-Term Investment-Grade Fund was down by 13.78%.

The flip side of course is that all of those funds look much more attractive now, with their higher yields.

In our specific household, we aren’t using bonds as “a thing to rebalance with stocks.” Rather, we’re just planning to hold the bonds until they mature, then spend the money. So we want individual TIPS for that. And with long-term TIPS yields well over 2% (very close to 3% in fact), we’re very happy to have the bond part of our portfolio earn inflation plus 2.X% for the next 20-30 years — especially given that for most of our careers, TIPS yields were practically zero and at some times even negative.

Financial Planning Roundup: Help Wanted (Technical Editor)

I find myself coming back to the FBI’s cybercrime stats over and over, because they’re just mind-blowing. Over the last decade (2015-2025), annual losses to cybercrime for people age 60+ grew by an annualized rate of 39%.

For comparison, NVIDIA’s annual revenue also grew by 39% annualized from 2015-2025. And over that time NVIDIA went from being a company most people hadn’t heard of to being the largest or second largest company in the world. (It’s a tight race with Apple at the moment.)

So it’s safe to say that cybercrime is a growth industry in the US right now. (It has been growing rapidly with victims under age 60 as well, just not as rapidly.)

I’ve been writing about the topic here on the blog this year, corresponding with readers, and discussing the topic with clients. (I also picked up a few cybersecurity-related certifications along the way, so that I could speak and write about it more intelligently.)

And after learning more about it and discussing it with so many people, I’m pretty firmly convinced that cybersecurity should be considered another core area of personal finance — no different from insurance planning, for instance. To spend decades working, saving, and investing, only to then leave the proverbial doors wide open to would-be thieves makes no sense. (And, just like with dangerous gaps in insurance coverage, most people with dangerous cybersecurity gaps aren’t doing it intentionally.)

Within the personal finance realm though, most of what you’ll see written about cybersecurity and fraud prevention is essentially a) telling the reader to freeze their credit and b) descriptions of types of scams. To be clear, it is a good idea to freeze your credit. And it is valuable to be aware of the common types of scams. But the reality is that “don’t fall for scams” is not a sufficient cybersecurity policy. A policy that relies on always getting it right, every time, your whole life, is simply not good enough.

To that end, I’ve been working on a book (current working title: A CPA’s Guide to Cybersecurity: How to (Hopefully) Not Get Hacked or Lose Your Financial Accounts to Fraud).

It’s not finished yet, but it’s getting closer and closer. It’s at the stage where I could use the assistance of somebody who works in cybersecurity, who could serve as technical editor. If that’s something you’d be open to doing, please get in touch.

Update: thank you to everybody who got in touch! I have found multiple people to provide their expertise as technical editors.

Other Recommended Reading

Thanks for reading!

Disclaimer: By using this site, you explicitly agree to its Terms of Use and agree not to hold Simple Subjects, LLC or any of its members liable in any way for damages arising from decisions you make based on the information made available on this site. The information on this site is for informational and entertainment purposes only and does not constitute financial advice.

Copyright 2026 Simple Subjects, LLC - All rights reserved. To be clear: This means that, aside from small quotations, the material on this site may not be republished elsewhere without my express permission. Terms of Use and Privacy Policy

My Social Security calculator: Open Social Security