GoKawiilWhat if there is something 100% secure than passwords but doesn’t have too much weight on the configuration and still a phishing resistant authentication method? Passkeys are your answer. Passkeys are not new as you have seen it’s been used pretty much everywhere these days.
Microsoft Entra is fully supporting Passkeys. Both Device Bound and Synced passkeys are in GA and this article is basically going through every aspect of passkeys when it comes to Entra.
Why Passkeys is the Future of Passwordless Authentication?
Simply put, passkeys are phishing-resistant. Attackers can no longer trick users into authenticating on fake websites because passkeys are bound to the legitimate service provider’s domain.
Additionally, passkeys cannot be reused or stolen. Authentication requires the private key stored securely on the user’s device, making it impossible for attackers to replay or misuse credentials.
How Passkeys Satisfy MFA?
Passkeys typically satisfy the Multi Factor Authentication even it sounds like a single authentication method.
Something you have – the device storing the private key (your phone, laptop, etc.)
– the device storing the private key (your phone, laptop, etc.) Something you know or are – the PIN/password or biometric (fingerprint, Face ID) that unlocks it
Passkey Key Pair – WebAuthn Protocol in Action
... continue reading