Future of Authentication: Passkeys

Passkey technology is a type of authentication system that uses a unique code or "key" to grant access to a secure device or system. This key can be a physical object, such as a key card or a key fob, or it can be a digital code that is entered into a device. Passkey technology is often used to secure access to buildings, computers, and other devices, and it can be an effective way to prevent unauthorized access and ensure the security of sensitive information.

Passwords and other traditional authentication methods can be vulnerable to phishing attacks and can be compromised in data breaches. Passkeys offer a more secure alternative that cannot be reused, are built on industry standards, and work across different operating systems and browsers. Passkeys are similar to saved passwords in that they can be confirmed using existing device screen lock methods such as a fingerprint. They can also be stored in the cloud and synced across devices, and can be used to sign in to apps and websites on other devices.

Now on Android and Chrome:

1. Users can create and use passkeys on Android devices, which are securely synced through the Google Password Manager.
2. Developers can build passkey support on their sites for end-users using Chrome via the WebAuthn API, on Android and other supported platforms.

Signing in to a website on an Android device with a passkey (Source: GoogleBlog)

For the end-user, creating a passkey requires just two steps: (1) confirm the passkey account information, and (2) present their fingerprint, face, or screen lock when prompted.

Signing in is just as simple: (1) The user selects the account they want to sign in to, and (2) presents their fingerprint, face, or screen lock when prompted.

Signing in to a website on a nearby computer with a passkey on an Android device (Source: GoogleBlog)

A passkey on a phone can also be used to sign in on a nearby device. For example, an Android user can now sign in to a passkey-enabled website using Safari on a Mac. Similarly, passkey support in Chrome means that a Chrome user, for example on Windows, can do the same using a passkey stored on their iOS device.

Since passkeys are built on industry standards, this works across different platforms and browsers - including Windows, macOS and iOS, and ChromeOS, with a uniform user experience.

Recommended Articles:

• https://duo.com/decipher/google-rolls-out-support-for-passkeys-in-android-and-chrome
• https://www.tomsguide.com/news/chrome-and-android-are-about-to-kill-passwords-heres-how
• https://www.fastcompany.com/90755838/theres-a-big-problem-with-apple-and-googles-plans-to-nix-passwords

Follow Nimesh Ekanayake on LinkedIn

#GooglePasskey #PasskeyAuthentication #SecureAccess #TwoFactorAuthentication #DigitalSecurity #Authentication #Security #TwoFactorAuthentication #OnlineSecurity #IdentityVerification #AccessControl #DataSecurity #CyberSecurity #UserAuthentication #Passwords