Passkeys
Passkeys give users a simple and secure way to sign in to your apps and websites across platforms without passwords.
Passkeys replace password and other passwordless login methods. It is built on the WebAuthn standard (also known as FIDO Sign-in), which uses public key cryptography to authenticate the user. With 1 click, Authgear upgrades your app to support this cutting-edge auth technology.
The passkey standard is supported on the latest versions of Chrome, Safari and Firefox browsers. On iOS 16 and macOS 13 (Ventura), Apple has added passkey support to the iCloud Keychain service. A passkey is synchronized and relayed with an iCloud account and can be used across a user's devices. Google and Microsoft have also announced the support in their future platforms.
User can login to their accounts using their biometrics easily. On Apple devices, Touch ID and Face ID authorize use of the passkey which then authenticate the user on the app or website.
Besides the built-in support of all major desktop and mobile platforms, passkeys can also be stored in hardware security keys such as YubiKeys, which provide the highest security against attacks.
Authgear add passkey feature to your apps and websites instantly. To enable it:
- 1.In your project portal, go to Authentication > Login Methods.
- 2.In the Select Login Methods section, turn on the Enable passkey support for compatible devices. toggle.
- 3.Press "Save" andyour app now support passkey login!🎉
It will take time for the passkey technology to be available on everyone devices. In the transition stage, it is recommended to enable "Password" or "Passwordless via Email/Phone" in your project so users with non-compatible devices can access your app.
If you want to use ONLY passkeys in your app, it's perfectly supported too! Select Custom and deactivate all authenticators in the Custom Login Methods tab. Remember to keep Enable passkey support for compatible devices. turned on.
See the list of Passkey support via Authgear on different platforms.
- macOS 12: Passkey is supported on major browsers. However the credentials are deleted when clearing browser data.
- iOS 15.5: Passkey is supported on Safari and stored locally on device. Credential will be deleted by "Settings > Safari > Clear History and Website Data"
- iOS 16 Beta 3: Passkey is synced with iCloud Keychain. The individual credentials can be viewed and managed in "Settings > Passwords"
- Android 12: Not supported