NMS - New Media Service GmbH
Hands on a laptop keyboard, a keyring and a smartphone beside them
AI-generated

Passkey

Passkey explained: Passwordless sign-in based on FIDO2 – how it works, benefits and prerequisites in the organisation.

IT Glossary

In brief

A passkey is a passwordless authentication method. Instead of a secret that can be transmitted, a key pair is used: the private key remains on the device and is unlocked via fingerprint, facial recognition or PIN, whilst the public key resides with the service.

The security gain is significant: there is no password that can be intercepted, guessed or entered on a spoofed website. Passkeys are bound to the domain and are therefore inherently phishing-resistant.

In the enterprise, deployment requires that devices and identity services support the procedure, fallback options for device loss are defined, and the rollout is accompanied. The path there is part of a passwordless strategy.