In 1961, MIT computer science professor Fernando Corbato unwittingly set the stage for a cybersecurity conundrum we face today – the ubiquitous password. Fast forward to the 21st century, and despite countless efforts to bolster security, “password” and “123456” still reign supreme. It’s evident that the current authentication method is struggling. Enter passkeys, the innovative solution from big tech that may just spell the end of passwords as we know them. In this article, we delve into the world of passkeys, exploring their potential to revolutionize digital security.
What do passkeys mean?
Users can access their online accounts without needing passwords thanks to a security mechanism called passkeys. They are based on the WebAuthentication or WebAuthn standard, which fortifies the security of your accounts using public-key cryptography.
Users can input a passkey that is given to their email or phone as a one-time code in place of typing a password. Users can secure their accounts from hackers who could be attempting to guess. Or steal their login information by doing this instead of having to remember and type complicated passwords.
In order to add an extra degree of security, passkeys can also be used in conjunction with other security measures like biometrics or PINs. Online services that wish to give their users a more simple and secure way to log in are starting to use them more frequently.
How do passkeys function?
Using public-key cryptography, which uses two linked keys. A public key and a private key, passkeys function. While the private key is kept on your device. The public key is kept on the web server.
When you log in, the server sends your device a challenge. Which it must solve using the private key before sending back a response. The server then uses the public key to validate the answer without requiring knowledge of the secret key. Passkeys are more secure than passwords since no secrets are shared or kept on the server in this manner.
What is required to begin using passkeys?
The positive aspect is that most modern smartphones and computers can use passkeys now that Microsoft, Google, and Apple have joined forces. These businesses used the FIDO Alliance and W3C standards to produce passkeys.
You can utilize passkeys with TouchID or FaceID in place of a master password. If you have an iPhone running iOS 16 or later, an iPad running iPadOS 16 or later, or a Mac running macOS Ventura.
You can utilize them with Google Password Manager, a service that saves. And syncs your passwords across all of your devices, if you’re using an Android phone or tablet running Android 9+. Passkeys can be used with Windows Hello if you have a Windows computer. As long as you’re signed in with your Microsoft account, passkeys are compatible with both Windows 10 and Windows 11.
You can utilize passkeys with Chrome, Edge, Safari, or Firefox as your online browser. The reason; they all support this new technology. Just make sure they are updated to the most recent version.
Passkey creation and usage techniques
You must have an account with a service provider that accepts passkeys. Like Microsoft, Google, or Apple, in order to establish a passkey. You must then enable the login with passkey option and log in to an application or website that accepts passkeys. You will then have a passkey. That is specific to your account and device once you have completed that.
You must first turn on iCloud Keychain on your devices in order to create passkeys on iOS and macOS. Then, you can select to use a passkey rather than a password when you create a new account on a compatible website or app. You can use Touch ID, Face ID, or a QR code to sign in using a passkey.
You can visit g.co/passkeys, log into your Google account, then click “Create a passkey” to create passkeys for Android devices. Verify your identification and add the device as a passkey by following the on-screen instructions. These actions can be repeated on several gadgets.
Passkeys: Do they destroy passwords?
The solution is not that easy. They provide a number of benefits over passwords. Including greater security and ease of use, but they also have adoption and compatibility issues.
They are not yet supported by all websites and services, and not all users are aware of or eager to use them. But given the aggressive promotion of passkeys by organizations like Google, Apple, and Microsoft. It might not come as a surprise if passwords become completely obsolete in the near future.
Visit CxO Global FORUM or CxO News Live for all the latest updates.
