← Back to glossary
🚫

Passwordless Authentication

Authentication

Multi-Factor Authentication (MFA) Passkey WebAuthn Security Key

Authentication model that avoids shared secrets; typically uses public-key credentials or magic links.

Definition

Passwordless authentication replaces passwords with stronger factors such as public-key credentials (passkeys/FIDO2), one-time links, or device-based proofs. Proper design includes secure recovery and anti-phishing controls.

In plain English Authentication model that avoids shared secrets; typically uses public-key credentials or magic links.

Why this matters

Why it matters: Eliminating passwords reduces large classes of attacks (reuse, stuffing, phishing) and improves account security.

Example

Example: Use WebAuthn passkeys with device-bound private keys and enforce step-up verification for sensitive actions.