For example, an Android user can use Safari on iOS or macOS, or the Chrome browser on Windows, to log in to a passkey-enabled website. Passkeys are independent of the operating system and browser. The passkey private key generated per user account for an online service is also encrypted at rest on the user’s devices with a hardware-protected encryption key”, according to The Hacker News. “During a login process, a platform that supports passkeys uses the public key to verify a signature from the private key to confirm the authenticity of the user.

Passkey is powered by the public-key cryptography principle that functions with a private key stored locally, on the user’s device, and a public key shared by the online service.

The same procedure goes for signing into a website: selecting an account and presenting a method of authentication. To create a passkey the user will use a two-step procedure: confirming the account that he chooses to log in with to the online service, and introducing the biometric information or the code for the device. For end-users, using one is similar to using a saved password today, where they simply confirm with their existing device screen lock such as their fingerprint”, Google explained. “Passkeys follow already familiar UX patterns, and build on the existing experience of password autofill. Passkeys were created by FIDO Alliance and supported also by Apple and Microsoft in a common effort for a passwordless sign-in standard. This is the next-generation login standard and aims to create a safer cyber environment by replacing traditional passwords with unique digital keys that are saved on your device. Google announced on October 12, 2022, his support for Passkeys on Android and Chrome.

Google chrome saved passwords cancel