Passkeys

Passkeys are an alternative to passwords that provide a more secure and user-friendly way to authenticate customers. Passkeys, based on standards governed by the FIDO Alliance, are based on public-key cryptography, are bound to a single web domain, and therefore cannot be phished. Also, no personal information is shared with the identity server, so a customer could have an account yet share no personal information with the identity server or application.

Passkeys allow two factors of authentication—something you have (your device) and something you are (your fingerprint or face)—to be combined in a single step, eliminating the need for passwords or less secure methods like email and SMS.

Passkeys are supported across all major operating systems and browsers, making them accessible and easy to use. Strivacity offers passkeys as an opt-in feature, allowing customers to choose passkeys instead of traditional username and password combinations. To promote their adoption, Strivacity integrates passkeys into the self-service customer experience, such as the registration, login, and password change flows.

📘

You can read more about promoting the passkey option to customers in the Promote passkey article.

Key features of passkeys

1. Security: Unlike traditional passwords, passkeys cannot be easily guessed, reused, or stolen in a data breach. The private key never leaves the customer's device, and only the public key is shared with the service, making passkeys resistant to phishing attacks and credential theft.

2. Convenience: Passkeys eliminate the need for customers to remember or manually enter passwords. Customers can authenticate using biometric data (like fingerprint or facial recognition) or device-based security methods (like a PIN or pattern).

3. Compatibility: Passkeys work across devices and platforms, allowing for seamless login experiences. They are supported by the FIDO (Fast Identity Online) Alliance standards, which ensures broad compatibility with modern web browsers and operating systems.

Passkeys are being increasingly adopted as a modern, secure alternative to traditional passwords, offering both enhanced security and a simplified customer experience.

To learn more about how passkeys function in various adaptive access scenarios, explore the articles below:

• Multi-factor methods
• Multi-factor methods for administrative accounts
• How customers manage adaptive access