Secure your web access with ease

What are passkeys?

The FIDO Alliance (Fast IDentity Online), made up of tech giants such as Google, Microsoft and Apple, aims to strengthen authentication security by reducing the use of passwords on the web and in the cloud.

It offers open standards for phishing-resistant connections and has developed the FIDO protocol including the FIDO2 standard, based on the passkey mechanism.

This method ofpasswordless authentication relies on on cryptographic key pairs : a public key registered on the site or application, and a private key stored securely on the user's device.

And to guarantee maximum security, it is recommended tosave the private key on a security key like Winkeo or a smart card like Badgeo, rather than on your computer or smartphone. This prevents any copying of the private key and ensures that authentication can only be performed with your device.

The FIDO protocol also includes the FIDO U2F standard for two-factor authentication. Although multi-factor authentication (MFA) has become essential, it can nonetheless be circumvented. This is why a Winkeo FIDO2 (+U2F) security key or a Badgeo FIDO2 (+U2F) card offers a highly secure second stage of authentication. Authentication is impossible without the Winkeo security key or the Badgeo card. Many sites are FIDO U2F compatible..

However, passwordless authentication via Passkeys is the most secure authentication method and provides the best user experiencePasskeys offer exceptional robustness against phishing attacks, thus constituting a so-called strong authenticationTo use them, you must access the options of the online site or service and create an access key. Already implemented by many platforms, the number of services supporting Passkeys continues to grow rapidly. For services that do not yet support them, two-factor authentication via a USB security key or smart card is recommended to provide effective protection against cyberattacks.