Category
Identity & Access Management
Topic
Modern authentication with passkeys
Audience
Businesses & IT managers
Reading time
approx. 7 minutes
What are passkeys?
Passkeys are a new method of authentication based on cryptographic keys. Instead of having to remember a password and also enter a code via a second layer of authentication such as MFA (for example, via an app or text message), passkeys use key pairs consisting of public and private keys. The private key is stored securely on the user’s device, whilst the public key is stored on the provider’s server. Authentication takes place by signing a request from the server with the private key, which is a more secure, user-friendly and less error-prone method of authentication. Passkeys eliminate the need to manage passwords and are based on a strong cryptographic foundation.Security and convenience benefits compared to passwords and MFA
1
Better security without passwords
Passwords are vulnerable to Phishing attacks, brute-force attacks and reuse across multiple services. Even with MFA, an attacker who gains access to the password can still attempt to bypass the second factor. Passkeys, on the other hand, are resistant to Phishing, as the private key is never stored on a server or transmitted over the internet. Even in the event of a successful attack on a server, the private key remains protected, as it is stored exclusively locally on the user’s device.2
User-friendliness and convenience
Passkeys eliminate the need to remember complex passwords or change them regularly. The user experience is significantly simplified, as passkeys can usually be synchronised automatically and seamlessly across devices (e.g. via Apple iCloud Keychain, Google Password Manager or other platforms). The user simply needs to confirm the authentication process with a fingerprint, facial recognition or a PIN – and that’s it! In comparison, MFA often requires the user to enter both their password and the MFA code, which takes more time and effort and can negatively impact the user experience. Passkeys offer a far more efficient and user-friendly solution that both enhances security and improves the user experience.3
Protection against data breaches and password theft
Another advantage of passkeys is protection against data breaches and password theft. With traditional authentication methods, passwords are often stored in a central database, which can become a target for hacker attacks. If an attacker gains access to this database, millions of pieces of user data can be stolen. Passwords may also be stored in insecure databases or held by a service provider in unencrypted form, which increases the risk. Passkeys circumvent this problem, as no passwords are stored on servers. Instead, the private keys are stored locally on the user’s device, thereby minimising the risk of a data breach or the theft of authentication data. This means that even if a server is successfully compromised, the user’s authentication keys remain secure.4
Reduced administrative burden
For organisations, the use of passkeys significantly simplifies the management of their security infrastructure. Whilst traditional authentication methods require passwords to be reset and renewed regularly – which not only presents an administrative challenge but can also lead to user frustration – this is no longer necessary with passkeys. As there are no passwords to manage, the workload associated with password policies, password recovery and user support is significantly reduced. Whilst the implementation of MFA is an additional security mechanism that improves security, it also creates an extra administrative burden. Passkeys eliminate this additional complexity by making the authentication process efficient and user-friendly.5
Interoperability and cross-platform use
Passkeys are not limited to a specific platform. They can be used on various devices and platforms, whether on iOS, Android or other operating systems. This provides seamless integration and interoperability between different devices and applications. In contrast, MFA may use different requirements and methods (e.g. SMS codes, app-based codes or hardware tokens) depending on the provider and platform, which makes integration and deployment across multiple systems more difficult. Passkeys offer a unified, cross-platform solution that provides users with a consistent and seamless experience across different devices and services.6
Future scalability and standards
As passkeys are based on modern web standards such as FIDO2 and WebAuthn, they are future-proof and can be easily integrated into a wide range of online services. These standards were developed to make authentication more secure and user-friendly, and are gaining increasing acceptance within the technology industry. Organisations that adopt passkeys today are well-positioned to incorporate future developments in online security without having to rely on outdated, insecure methods.“The future of authentication clearly lies in the use of passkeys – secure, fast and without compromise.” Mint Secure GmbH
What do the major providers recommend?
Microsoft and other authentication providers also clearly recommend the use of modern technologies to secure authentication processes, such as with Microsoft Entra. Combined with conditional access rules, access can be optimally secured.
How Mint Secure supports you in this
From assessing your current authentication strategy to technical implementation, we’ll guide you through the transition to modern authentication.Identity & Access Management
Design and implementation of passkeys, MFA and conditional access, tailored to your existing infrastructure.Security Audit
Review of your existing authentication procedures to identify vulnerabilities and areas for improvement.Security Consultancy
A bespoke roadmap for the phased migration from passwords to passwordless authentication.
Are you interested in securing your systems and authentication procedures? We’d be happy to help and find the best solution for you. Get in touch now.
