Skip to main content

Passwordless (coming soon)

WebAuthn

The Web Authentication Browser API (WebAuthn) is a specification written by W3C and FIDO. The WebAuthn API allows servers to register and authenticate users using public key cryptography instead of passwords.

WebAuthn is commonly used with:

  • USB, NFC or Bluetooth Low Energy devices (e.g. YubiKey).
  • Built-in OS biometric authentication platforms such as Apple TouchID, Apple FaceID, Windows Hello, Android Biometric Authentication

When the user triggers the WebAuthn process, the browser shows WebAuthn prompt. The prompt looks different depending on the used browser.

Passkeys

Passkeys are (as described by the FIDO Alliance) "a password replacement that provides faster, easier, and more secure sign-ins to websites and apps across a user's devices."

Using passkeys allows for passwordless user sign-up and sign-in, which creates a safer environment for your system's users who don't have to rely on easily exploitable, legacy authentication methods such as passwords.

Passkeys are an industry-accepted and adopted standard, which means that all of your users will be able to use this feature, no matter the hardware they work with. The notable adopters of passkeys include:

  • Apple with Apple Passkeys
  • Google
  • Microsoft

While companies can add proprietary features to passkeys, such as iCloud synchronization in Apple Passkeys or Google Password Manager synchronization for Android devices, all of them use the same FIDO standard. This means that enabling passkeys will be a simple, one-time operation in azuma doa.

More coming soon.