Several of the world’s leading companies, including Microsoft, Apple, Google, Visa, Mastercard, Amazon, Samsung and PayPal, have come together to form the FIDO Alliance with the aim of making online logins more secure. To do this, they have developed a more secure login process that is intended to serve as an alternative to passwords. This method is called Passkey and, unlike other login methods, does not require an authentication app.
Passkeys are encrypted key pairs that are automatically generated during account registration and are used in place of passwords. The public key is stored on the provider’s server, while the private key is made available to the user. When the user wants to log into a service, the website or app sends a request for the private key. The user then receives a confirmation request on their device, for example their smartphone, which they have to confirm with a fingerprint, PIN or Face ID.