← Back to glossary

Authenticator (platform or roaming) performing public-key challenge-response for authentication.

Definition

A security key is an authenticator that proves possession of a private key by signing a server challenge. It can be a roaming device (USB/NFC/BLE) or a platform authenticator (built into a phone/laptop).

In plain English Authenticator (platform or roaming) performing public-key challenge-response for authentication.

Why this matters

Why it matters: It provides phishing-resistant authentication and reduces reliance on shared secrets.

Example

Example: Login requires key presence and user verification (PIN/biometric) before signing the challenge.