docs
authentication

Passkey Authentication

Passkeys offer a seamless and secure way to log in using biometrics like fingerprints or facial recognition. Set it up once, and enjoy passwordless authentication with just a fingertip or your face!

The Future of Authentication

Imagine logging in with just your fingerprint or a glance at your device—no need to remember passwords or type in codes. That’s the beauty of Passkey Authentication! It’s fast, secure, and incredibly user-friendly, making it perfect for modern applications.

What Are Passkeys?

Passkeys are a passwordless authentication method built on public key cryptography. They use the secure hardware on your device—like a fingerprint sensor or facial recognition system—to authenticate users.

How It Works Behind the Scenes

When setting up a passkey, the device generates a unique pair of cryptographic keys:

  • A private key that stays securely stored on the device.
  • A public key that is shared with the server.

During login, the device uses the private key to sign a challenge from the server. The server verifies the signature using the public key, ensuring that only the registered device can authenticate. The device requires the user’s biometric data (fingerprint, facial scan) to unlock the private key.

How to Set Up and Test Passkeys

Setting up passkeys in this demo is straightforward:

  1. Create a Credential: When prompted, choose a name for your passkey (e.g., My Laptop).
  2. Authenticate: Follow your device’s instructions, which may include scanning your fingerprint, showing your face, or entering a PIN.
  3. Done! Your passkey is now saved and ready to use.

To test:

  1. Log out of your account.
  2. At the login screen, select Sign in with passkeys.
  3. Follow the device-specific instructions (e.g., provide biometrics).
  4. Enjoy seamless, 2FA-authenticated access to your account.

Why Passkeys Matter for Startups

  • User-Friendly: Eliminates password fatigue by removing the need to remember or manage passwords.
  • Highly Secure: Resistant to phishing, replay attacks, and data breaches due to the reliance on cryptographic keys.
  • Device-Integrated: Works seamlessly with modern hardware for a frictionless user experience.

Bring your application to the forefront of innovation with passkey authentication—a modern solution for secure, scalable, and effortless user login!

TOTP Security keys