According to a recent survey by the FIDO Alliance, more than a third (36%) of users had at least one online account breached in the past year due to weak or stolen passwords . Passkeys can help in these cases.
Fortunately, in recent months, awareness of passkeys, as has their use. Passkeys are a more modern and secure authentication method that replaces traditional usernames and passwords. FIDO reported that nearly half (48%) of the 100 most popular websites worldwide have already adopted technology that supports passkeys.
See also: Windows 11: Microsoft is testing support for third-party passkeys
At the same time, 75% of respondents said they are now familiar with this technology, while 69% have enabled passkeys on one or more accounts. Of these, 38% have enabled this feature on every available account .
The survey also showed that among those who are aware of passkeys, 53% believe they provide increased security and 54% find them easier to use compared to classic passwords.
Passkeys are more resistant to phishing and account breaches
Passkeys allow users to access websites and services without typing usernames and passwords . They use biometric authentication, such as fingerprints and facial recognition, and provide a more secure and convenient alternative to traditional passwords. The technology creates a cryptographic key pair (one public and one private) that is associated with a user's account. Apps and services that support passkeys use the public key to verify a person's identity by matching it with the private key, which is stored on the user's device.
See also: FIDO allows secure movement of passkeys across platforms
When the user attempts to log in, the online platform sends a cryptographic challenge to the user's device. The user will then be asked to authenticate with their PIN or a biometric method, which will cause the private key to sort out the cryptographic challenge and send it back to the online service. The online service will use the user's public key to verify the challenge and connect the user to their account.
Unlike traditional passwords, passkeys are difficult to breach through phishing attacks, as they only work on authorized websites and applications. Verification is done by the operating system or browser, preventing the user from being tricked into entering their details on a fake page.
In recent years, several major technology companies have started supporting passkeys as a way to log in for their users.
In fact, Microsoft announced today that it is enabling passkey support for all of its personal accounts by default. The company emphasized that it is now clear that traditional passwords, regardless of length or frequency of change, are not enough to secure our online lives.
See also: Windows 11: How to create, use and delete passkeys?
FIDO celebrates World Passkey Day
The FIDO Alliance's annual survey was published on May 1, 2025, a date that no longer bears the title "World Password Day", but has been renamed "World Passkey Day", in an effort to permanently eliminate passwords and use more secure and modern identification methods.
Source: www.infosecurity-magazine.com
🔑 Secure your passwords with Proton Pass
Password manager from Proton — end-to-end encryption, passkeys, built-in 2FA, and monitoring for leaks of your credentials.
- ✔ Encrypted storage of passwords & passkeys
- ✔ Notification if any of your passwords are leaked (Dark Web Monitoring)
- ✔ Free version — on all devices
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
