Passwordless (coming soon)
WebAuthn
The Web Authentication Browser API (WebAuthn) is a specification written by W3C and FIDO. The WebAuthn API allows servers to register and authenticate users
using public key cryptography instead of passwords.
WebAuthn is commonly used with:
- USB, NFC or Bluetooth Low Energy devices (e.g. YubiKey).
- Built-in OS biometric authentication platforms such as Apple TouchID, Apple FaceID, Windows Hello, Android Biometric Authentication
When the user
triggers the WebAuthn process, the browser shows WebAuthn prompt. The prompt looks different depending on the used browser.
Passkeys
Passkeys are (as described by the FIDO Alliance) "a password replacement that provides faster, easier, and more secure sign-ins to websites and apps across a user's devices."
Using passkeys allows for passwordless user
sign-up and sign-in, which creates a safer environment for your system's users
who don't have to rely on easily exploitable, legacy authentication methods such as passwords.
Passkeys are an industry-accepted and adopted standard, which means that all of your users
will be able to use this feature, no matter the hardware they work with. The notable adopters of passkeys include:
- Apple with Apple Passkeys
- Microsoft
While companies can add proprietary features to passkeys, such as iCloud synchronization in Apple Passkeys or Google Password Manager synchronization for Android devices, all of them use the same FIDO standard. This means that enabling passkeys will be a simple, one-time operation in azuma doa.
More coming soon.