🔐
Passkeys
Authentication
FIDO/WebAuthn credentials using public-key cryptography for phishing-resistant authentication (often synced across devices).
Definition
Passkeys are WebAuthn credentials: the device holds a private key and the service stores the public key. Login uses challenge-response with origin checks, preventing replay and many phishing attacks.
In plain English
FIDO/WebAuthn credentials using public-key cryptography for phishing-resistant authentication (often synced across devices).
Why this matters
Why it matters: Eliminates password reuse and significantly reduces phishing and credential stuffing risk.
Example
Example: Register a WebAuthn credential; on login the client signs a challenge and the server verifies the signature and origin.