Passkey
Also called: passkeys
A sign-in credential based on FIDO standards that replaces the password. It is stored on a phone, computer or hardware security key, and the user unlocks it the same way they unlock the device, with a fingerprint, face or PIN. Each passkey is bound to one website, so a fake site cannot obtain a usable credential, which makes passkeys resistant to phishing.
Further reading: fidoalliance.org
From the Security Academy
Multi-Factor Authentication (MFA) Rollout Guide: What Is Strongest and Where to Start
How SMS, OTP, push, number matching and FIDO2/passkeys compare on phishing resistance, how push bombing and AiTM bypass MFA, and where to enable it first.
7 min read ·
Advisories that mention this term
No advisories mention this term yet.