Apple’s PassKeys – A New Generation Password Authentication.
Using passkeys for account authentication is far simpler and more secure than using passwords according to tech industry standards. Make your apps and websites more secure by using passkeys.
By replacing passwords with passkeys, websites and apps can provide a more convenient and secure sign-in experience.A Passkey is a standard-based technology that is resistant to phishing, always strong, and does not share any secrets.
It makes Passkeys superior to passwords. It simplifies the registration process for aapps and websites, makes them easy to use, and allows them to work on Apple and non-Apple devices within physical proximity.
Passkeys eliminate the need to use passwords using iCloud Keychain public key credentials. In iOS and macOS, accounts are generated and authenticated using biometric identification, such as Touch ID and Face ID.
Securing credentials
In WebAuthn (or “WebAuthn”), passkeys are built using public key cryptography. The operating system generates a pair of cryptographic keys in creating an account. Each account’s key is generated securely and uniquely by the device.
The server stores one of these keys as a public key. There is no secret about this public key. Another is the private key that is used to sign in actually. Private keys are never revealed to the server.
When Touch ID or Face ID is available on Apple devices, they can use them to authorize passkey use, then authenticate the user.
Public keys are not protected, and no shared secrets are transmitted. Passkeys are highly phishing-resistant, easy to use credentials.
Streamlined sign-in, without passwords
The user can easily create an account in one step, sign in using Face ID or Touch ID, and manage their passkeys.
Synced with iCloud Keychain, Passkeys are available on all Apple devices. The iPhone can also log in to websites and apps on non-Apple devices.
Next-generation account security
A passkey is a cryptographic key pair that replaces passwords based on FIDO Alliance and W3C standards. The security of these key pairs is profoundly enhanced.
- The credentials are strong. The passkeys are all strong. There is no possibility of guessing, reusing, or weakening them.
- They are protected against server leaks. Because servers only store public keys, they are less valuable targets for hackers.
- Protect against phishing attacks. Since passkeys are intrinsically linked to the apps or websites, people cannot be tricked into using their passkeys on fraudulent applications or websites.
- Passkeys in iCloud Keychain is end-to-end encrypted, so Apple cannot access them. Passkeys ensure a strong, private connection between a website or app and its users.
Ensures the security of Passwords Authentication
With passkeys, users can sign in using AutoFill, Face ID, or Touch ID for biometric verification. Using passkeys alongside passwords allows users to access the site without adjusting their sign-in page based on their credential type. The new password authentication Services API enables you to add passkeys, creating well-known sign-in flows.
https://hackersonlineclub.com/passkeys-apple-password-authentication/
