Clear DefinitionsPasskey (authentication method)
1 min read
Pronunciation
[pas-kee]
Analogy
Passkeys are like built-in digital badges that websites recognize without passwords.
Definition
A modern, phishing-resistant credential based on FIDO standards, using public-key cryptography managed by the platform (e.g., OS or browser).
Key Points Intro
Passkeys improve wallet security by:
Key Points
Phishing resistance: Bound to origin and device.
Biometric unlock: Uses Touch ID/Face ID or PIN.
Cross-device: Sync via secure cloud escrow.
No shared secret: Only public key stored server-side.
Example
A web wallet uses WebAuthn passkeys so users sign in with Face ID instead of passwords or seed phrases.
Technical Deep Dive
Passkeys implement FIDO2: client generates an RSA or EC key pair, registers public key with Relying Party via CTAP2. Authentication uses assertion signed by authenticator and verified by RP.
Security Warning
Cloud-synced passkeys risk mass compromise if account recovery is weak.
Caveat
Platform-dependent; may not work uniformly across devices.
Passkey (authentication method) - Related Articles
No related articles for this term.