What is a Passkey?
08 April 2025A Passkey is a secure key where you don't need to remember a password, in fact, you cannot remember it, write it down or give it to someone else, but you can still use it to log in. This makes logging in easier and safer. Moreover, it makes it harder for hackers to gain access to your accounts. Passkeys often work with biometric verification, such as your fingerprint or facial recognition.
How do you get a Passkey?
You can request a Passkey from a party that offers the service (website, webshop, web application). You then receive a public key and a private key. The public key remains with the provider and the private key is stored on your device (computer, tablet, phone) in a place where no one can access it.
How does a Passkey work?
When you create an account with a Passkey, the device generates two keys. If you then want to log in, you are not asked for your password, but you can use the device to log in. Your device (computer, smartphone) then uses the stored private key and sends it to the provider where you want to log in. The key is verified there and you gain access to your account. There is a time limit for each login attempt.
Authentication
The private key is on your device. By logging in on the device with, for example, a PIN code, your fingerprint, or facial recognition, the private key can be used for authentication.
Can you use Passkeys everywhere?
Passkeys are still in their infancy and are not yet accepted everywhere, but we are sure you will encounter them more often in the near future. The following operating systems, browsers and websites already support Passkeys:
- Operating systems: Apple, Google, Microsoft
- Browsers: Chrome, Safari, Edge, Firefox
- Websites e.g. Dropbox, PayPal, Amazon, X, LinkedIn, TikTok
Phishing protection
Recently we have again received many phishing questions at our support department, from customers who do not trust certain emails. Passkeys are resistant to phishing attacks. The key knows exactly what the real site is where you can log in, so emails referring to fake websites are no longer effective.
Passkeys in your application?
We can implement Passkeys in web applications that we develop for our customers. Want to know more? Then contact us.
