Lesson 6 +15 XP

Passkeys & Biometric Authentication

The End of Passwords Has Arrived!

Passkeys are the modern replacement for passwords created by Apple, Google, Microsoft, and the FIDO Alliance.

How Passkeys Work

Instead of creating a password, a Passkey generates a unique public-private cryptographic keypair for every site:

  • Public Key: Stored on the website's server.
  • Private Key: Stored securely inside your device's Secure Enclave / TPM chip or password manager.

To log in, you simply use Touch ID, Face ID, Windows Hello, or your device PIN!

Advantages of Passkeys

  • No Password to Remember or Type.
  • Impossible to Phish.
  • No Shared Secrets stored on servers that can leak in data breaches.
  • Synced Securely across your devices via iCloud Keychain, Google Password Manager, or Bitwarden.