Passkey
A sign-in method based on public-key cryptography that is confirmed with the device's fingerprint, face recognition or screen lock instead of a password.
- 01
Why it matters
A passkey is bound to a specific site and the private key is never shared with the site, so a fake login page cannot capture it, which makes it resistant to phishing. There is also no password to steal or reuse on another site. Major operating systems and browsers support this method.
- 02
Example
An e-commerce company adds passkey sign-in to its admin panel. Staff sign in with their fingerprint, and phishing e-mails asking for passwords become useless.
- 03
Common mistake
Adding passkeys while leaving easy routes such as weak passwords and SMS codes open as well. Attackers always use the weakest way in.
- 04
Related terms
Related services and guides
Let's talk about your project.
Tell us what you need; we will define the scope together.