Passkeys

Adjer

Recently Microsoft enabled Windows 11 users to use Passkeys as a means of doing away with the  tyranny of the password & constant resetting passwords & at the same time improving security of the  "logging in" process by using  Biometric access to Passkeys. I am mainly thinking about banking here. Unfortunately not many banks are providing passkey access to personal accounts. I would like to have Martin Lewis take up this matter (with all his power) to get this much needed change done as quickly as possible. Of course we need Passkeys to be available on other platforms too, so other devices such as  tablets can be used. It's also important that all providers use the same technical standards.  There is lots of internet info around  for those who do not know about this. eg.   FIDO Alliance Proposes New Passkey Exchange Standard - Infosecurity Magazine
     Adjer.

Newcad

My bank already uses biometrics, ie. I can use a fingerprint to log into my banking app.

So why would they want to adopt 3rd party passkeys from M$, or Goggle (stet), or anyone else?

Vitor

Passkeys: What Are They and How Do They Work? | PayPal US

Olinda99

I din't want my logon ability to depend on something stored on a device that can fail or get lost / stolen thank you.

forgotmyname

Constant resetting passwords?  I have the same ebay password that I setup in 1996,  same paypal and amazon passwords that were
setup before 8 characters was a minimum never mind a mix of upper/lower and special characters.

My banking has longer passwords but I have never changed the password and my phone allows biometric access to those so why would
I want to use Microsoft with it's data collection in the background?

Why not change banks to ones that allow the access you require?

Billxx

Olinda99 said:

I din't want my logon ability to depend on something stored on a device that can fail or get lost / stolen thank you.

You can mix and match passkeys across different devices.  i.e. I have an account where I use Face ID on my iPhone and a passkey on my MacBook.

PHK

Olinda99 said:

I din't want my logon ability to depend on something stored on a device that can fail or get lost / stolen thank you.

That’s not how Passkeys work. 

PHK

My bank uses biometrics both via the phone’s TPM and their own face/voice recognition. 

jshm2

Doubt anything will come of it yet.

Mainly as passkeys are device specific, so if you lose your phone for example, you lose your passkeys saved on it. Also, compared to 2 factor auth, it's not easy to setup on all platforms and implement. 

Olinda99

PHK said:

Olinda99 said:

I din't want my logon ability to depend on something stored on a device that can fail or get lost / stolen thank you.

That’s not how Passkeys work. 

I think that's exactly how they work.ie the passkey is stored on the device

If you lose access to the device you lose access to the passkey locally

The only way round this is to 'sign in' to an offline account eg google, microsoft etc so they are backed up in the cloud.

My laptops etc are all local accounts

PHK

Do you mean an online account?