Passkey (authentication)
A passkey is a digital credential that is used as an authentication method for a website or application.[1][2][3] The passkeys standard is a type of passwordless authentication, promoted by the World Wide Web Consortium and the FIDO Alliance.[4] They are often stored by the operating system or web browser and synchronized between devices from the same ecosystem using the cloud,[1][5] however they can also be confined to a single device such as a physical security key.[2]
Passkeys are designed to be more convenient and phishing-resistant than conventional authentication methods.[4][6] They are normally secured using possession (of the device or security key), and often utilize biometrics as an additional security factor, neither of which require the user to memorize a password.
In marketing material, the terms passkey or passkeys are preferred over related terms such as FIDO or WebAuthn, because they are less likely to cause confusion.[7] It is a common misconception that passkeys are specific to Apple devices.[7]
History
The term passkeys was first popularized in June 2022 when Apple announced they would be adding support for the passkeys standard in iOS and macOS.[6][1] This was the first time that most people had heard the term, and many assumed that it was specific to Apple. However, the term is also used by other companies such as Microsoft and Google,[7] and therefore should be used as a common-noun (i.e. lowercase except when starting a sentence).[7][2][4] Google announced that Android and Google Chrome would support passkeys in October 2022[8] and support for personal Google Accounts in May 2023.[9]
Dashlane was the first company to support storing passkeys in a web browser extension, with the public release in August 2022,[5] followed by NordPass in February 2023.[10] In May 2023, Google anounced it is incorporating passkeys into its login services.[11]
Other password managers have plans to support this in the future.[12][13]
References
- ↑ 1.0 1.1 1.2 Shein, Esther (6 June 2022). "Apple touts Passkey, its new privacy feature, at WWDC 2022". TechRepublic (TechnologyAdvice). https://www.techrepublic.com/article/apple-touts-passkey-its-new-privacy-feature-at-wwdc-2022/.
- ↑ 2.0 2.1 2.2 "Passkeys (Passkey Authentication)". FIDO Alliance. https://fidoalliance.org/passkeys/.
- ↑ "Passwordless login with passkeys". Google. https://developers.google.com/identity/passkeys.
- ↑ 4.0 4.1 4.2 "Expansion of FIDO standard and new updates for Microsoft passwordless solutions". Microsoft. https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/expansion-of-fido-standard-and-new-updates-for-microsoft/ba-p/3290633.
- ↑ 5.0 5.1 "Ushering in the Passwordless Future at Dashlane". Dashlane. https://www.dashlane.com/blog/ushering-in-the-passwordless-future-at-dashlane.
- ↑ 6.0 6.1 Clemons, Taylor (6 June 2022). "WWDC 2022: Apple announces Passkey feature to eliminate passwords across platforms". ZDNET. https://www.zdnet.com/article/wwdc-2022-apple-announces-passkey-feature/.
- ↑ 7.0 7.1 7.2 7.3 Shakir, Umar (6 August 2022). "Reminder: passkeys are not just from Apple". The Verge (Vox Media). https://www.theverge.com/2022/8/5/23293643/apple-passkeys-fido-alliance-passwordless-google-microsoft.
- ↑ Nield, David (16 October 2022). "How to Use Passkeys in Google Chrome and Android". WIRED (Condé Nast). https://www.wired.com/story/how-to-use-passkeys-google-chrome-android/.
- ↑ Burt, Jeff (4 May 2023). "Google opens up passkeys to personal account holders". The Register (Situation Publishing). https://www.theregister.com/2023/05/04/google_passkey/.
- ↑ "What Is a Passkey?". Nord Security. https://nordpass.com/blog/what-is-a-passkey/.
- ↑ ThioJoe (28 May 2023). "Google Accounts Just Got an AWESOME New Feature". https://www.youtube.com/watch?v=VuzddtQZeT8.
- ↑ "Save and sign in with passkeys using 1Password in the browser". 1Password. 6 June 2023. https://blog.1password.com/save-sign-in-passkeys-1password/.
- ↑ "Bitwarden Roadmap 2023". Bitwarden. https://vimeo.com/798831204.