Passkeys are safer than passwords. No discussion. But are they simpler? That depends on who you ask, and when.<\/p>\n
For the daily logon, yes. A fingerprint or a glance at the camera is faster than typing a password and waiting for a code.<\/p>\n
But the edge cases are harder. What happens when you lose your phone? When you get a new laptop? When you want to log on from someone else\u00b4s computer? When the passkey is synced in one ecosystem, but you use devices from another? For a technically curious person, these are small puzzles. For many users, they are a reason to call the help desk, or to give up and fall back to the password.<\/p>\n
For organisations, there are more questions. Which passkeys should be allowed: synced ones in a personal cloud account, or only device bound ones that the organisation controls? How do you register them securely, and how do you recover when a user loses all of them? Recovery is where attackers will go next.<\/p>\n
So for management: Passkeys should be part of your strategy, especially for admins and for everyone with access to sensitive data. But plan the whole lifecycle, not just the logon. Registration, recovery, lost devices and support. And invest in helping the users through the change. A security improvement that users avoid isn\u00b4t an improvement.<\/p>\n
Simple for the user requires a lot of work from the organisation.<\/p>\n","protected":false},"excerpt":{"rendered":"
Passkeys are safer than passwords. No discussion. But are they simpler? That depends on who you ask, and when. For the daily logon, yes. A fingerprint or a glance at the camera is faster than typing a password and waiting for a code. But the edge cases are harder. What happens when you lose your […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[11,4],"tags":[38,155,157],"class_list":["post-1434","post","type-post","status-publish","format-standard","hentry","category-business","category-security-architecture","tag-business","tag-passkeys","tag-user-experience"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1434","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1434"}],"version-history":[{"count":1,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1434\/revisions"}],"predecessor-version":[{"id":1445,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1434\/revisions\/1445"}],"wp:attachment":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1434"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1434"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1434"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}