Passkeys: a secure solution to replace passwords forever

Yubico is a Business Reporter client. “ Passkeys use cryptography to create digital keys which protect your accounts from attacks such as phishing and credential stuffing”, says Christopher Harrell, Chief Technology Officer at Yubico, a leading provider of multi-factor authentication. “Successful authentication relies on proving possession of the private key in a way that the service with the public key can verify.” Crucially, passkeys are phishing-resistant and can’t be stolen or intercepted during use and, as each one is linked to a specific website or app, passkeys prevent credential attacks by phishing sites. If the passkey recovery mechanisms aren’t phishing-resistant then attackers will shift their phishing efforts to those.” Despite the growing availability of passkeys, public awareness still has some way to go. More than half – 59 per cent – of business accounts are still authenticated using username and passwords, according to Yubico’s State of Global Enterprise Authentication Survey.