Passkeys and FIDO2 keys

Passwordless is an authentication method where users log in without using a traditional password. Instead, more secure alternatives such as biometrics, one-time codes, hardware tokens, or authentication apps are used.

• Increased security: Passwords can be stolen, guessed, or reused, making them vulnerable to phishing and brute-force attacks.
• Better user experience: No need to remember or reset complex passwords.
• Less IT administration: Reduces the need for password resets, saving time and resources.

Phishing-resistant two-factor authentication is a security mechanism that prevents attackers from tricking users into revealing their login credentials through phishing attacks. This type of authentication is designed to be immune to phishing by ensuring that only the legitimate user and service can complete the authentication process – even if a hacker tries to steal login credentials.

Many traditional two-factor login methods (like SMS codes or one-time codes from apps) can be compromised through phishing, man-in-the-middle attacks, or SIM swapping. Phishing-resistant methods ensure that a hacker cannot redirect or intercept two-factor codes.

Below is a selection of devices and applications that can be used for passkeys.

• iCloud Keychain
• YubiKey 5 Series with NFC
• YubiKey 5 Series 
• Security Key NFC by Yubico
• Windows Hello (Face, PIN, Finger)
• iOS Authenticator App
• Android Authenticator App

At the itwebshop you can order Yubikey keys. We offer a wide selection with both USB-A and USB-C interfaces as well as keys with NFC functionality, which you can use for quick login by simply holding the key up to your mobile phone or using it via USB on your computer.
 

Here you will find instructions on how to register passkeys in your authenticator on iOS device or Android device

Instructions for registering passkeys, if you have a FIDO2 key, can be found here.

Windows Hello is a more personal and secure way to sign in to your Windows device. Instead of using a password, with Windows Hello you can sign in using facial recognition or a PIN. 

Here you will find instructions on how to register Windows Hello.