Skip to main content

Posts

Showing posts with the label passwordless login

Passkeys Are Everywhere Now. Here's What They Actually Do (and Where They Still Trip You Up)

Photo by Walls.io on Pexels So What Is a Passkey, Really? I put off setting up passkeys for months because every explanation I read made it sound like a cryptography lecture. Public key pairs, authenticators, attestation — my eyes glazed over. Then I finally sat down and turned one on for my Google account, and it took about ninety seconds. No password typed, no code texted to my phone. Just a Face ID prompt and I was in. A passkey is basically a login that lives on your device instead of in your head. When you set one up, your phone or laptop creates a matching pair of digital keys — one stays locked on your device, the other gets stored by the website. To log in, your device proves it has the private half using whatever unlock method you already use: Face ID, a fingerprint, or your screen PIN. Nothing gets typed, and nothing gets sent over the internet that a hacker could intercept or a leaked database could expose. I've written before about setting up my phone's voice ...