In a world that is becoming increasingly connected, our digital security is becoming a priority. This is where passkeys come into play as an innovative solution to the challenges posed by outdated passwords. But what are passkeys, and why are they so important?
Passkeys didn't just appear out of nowhere. They are the result of years of efforts to make our online experiences safer and more user-friendly. In the past, passwords were the standard to protect our accounts. However, as time went on, the shortcomings of passwords became apparent. They can easily be forgotten, stolen, or even guessed by malicious individuals.
The call for a better solution grew louder, and thus the concept of passkeys was born. Inspired by the principles of physical keys, passkeys are designed to open the digital doors of our accounts, but with an extra layer of security. They are a modern twist on an old, trusted concept.
The idea of passkeys received a significant boost when major players in the tech industry, such as Apple, embraced them in 2022. With Apple's introduction of passkeys, a big step was taken towards a passwordless web. This new system makes logging in a breeze: your device just 'knows' it's you, without you having to enter a password.
Passkeys are more than just a convenience. They address the core issues of digital security by making it harder for malicious actors to access your accounts. While traditional passwords can be tricked out by clever scammers, passkeys offer a robust barrier that protects your data.
The rise of passkeys marks an exciting time in the evolution of digital security. They offer the promise of a safer and simpler online experience, allowing us to navigate the ever-growing digital world around us with confidence.
What Are Passkeys?
Passkeys are like digital keys that help you log in quickly and securely to websites and apps, without having to remember a password. Instead of typing a password each time, with passkeys you have a kind of digital key on your phone or computer that opens the door for you. The beauty is that if your phone or computer can recognize your face or fingerprint, you can use this digital key without having to type anything!
Creating a Passkey:
- You go to a website and click a button that says: “Create a passkey”.
- The website sends your phone or computer a puzzle (called a challenge) that needs to be solved to prove that you are really you.
- Your phone or computer creates a set of keys, a private key (which is the passkey) and a public key. The private key stays on your device, and the public key is sent to the website along with the solved puzzle.
- The website checks the solved puzzle with the public key and says: “Okay, this passkey belongs to you!” and stores the public key for the next time you log in.
Logging in with a Passkey:
- Next time you log in, you click a button that says: “Log in with a passkey”.
- The website sends another puzzle to your device.
- Your device uses your passkey to solve the puzzle, but this time the passkey stays on your device, it does not go to the website.
- Instead, only the solved puzzle is sent to the website, along with a kind of ID card that says which passkey it used.
- The website looks at the ID card, retrieves the previously stored public key, and checks the solved puzzle. If everything is correct, the website says: “Hi! It really is you, welcome back!” and lets you in.
This way of logging in is safer because your passkey (your private key) never leaves your device, and it is also easier because you don't have to remember or type passwords. All you need is your device and sometimes a quick check, like a fingerprint or a PIN code, to prove that you are really you.
Where Can I Already Use Passkeys?
Passkeys are emerging as a way to log in to various platforms. Here are apps and websites where you can already use passkeys:
- 1Password
- Amazon
- Dashlane
- eBay
- GoDaddy
- WordPress.com
- PayPal (Apps only)
- Adobe
- Tailscale
- GitHub
- TikTok (iOS)
- Nintendo
- Microsoft (Windows, Outlook.com, Office 365, Xbox)
- Apple iCloud
- X (Twitter)
- Uber
The adoption of passkeys is rapidly increasing, with major tech companies like Apple, Google, and Microsoft leading the way forward. Although the use of passkeys is not yet widespread, the movement towards a passwordless future is clearly underway, and it is likely that more platforms will support passkeys in the near future.