Download Publication
Who it's for:
- IT Security Professionals
- System Administrators
- Software Developers
- Cybersecurity Analysts
- Network Engineers
Beyond Passwords: The Role of Passkeys in Modern Web Security
Release Date: 11/12/2023
Working Group: Identity and Access Management
Web authentication methods have evolved significantly over the years to improve security and the user experience. In the early days of the internet, usernames and passwords were the primary means of authentication. Next came two-factor authentication, which added an extra layer of security but is rather inconvenient. This paved the way for the emergence of Passkeys as a more secure and user-friendly authentication method.
This research publication positions Passkeys as a revolutionary step towards passwordless authentication. It offers an in-depth explanation of how Passkeys work, while also contrasting them with other authentication methods. By leveraging the latest in cryptographic techniques and FIDO standards, Passkeys significantly enhance security while simplifying the user authentication process.
Key Takeaways:
- What Passkeys are and how they operate using cryptographic keys
- The security advantages of Passkeys over traditional passwords
- How Passkeys improve security by reducing the risk of phishing and other attacks
- How Passkeys integrate with WebAuthn and FIDO standards
- How to set up and manage Passkeys across different devices and operating systems
- Potential vulnerabilities and best practices for maintaining Passkey security
Download this Resource
Share
Related resources
Related Resources
.jpeg)
.jpeg)
.jpeg)
.jpeg)
Interested in helping develop research with CSA?
Related Certificates & Training
.png){kind=logo}
Learn the core concepts, best practices and recommendation for securing an organization on the cloud regardless of the provider or platform. Covering all 14 domains from the CSA Security Guidance v4, recommendations from ENISA, and the Cloud Controls Matrix, you will come away understanding how to leverage information from CSA's vendor-neutral research to keep data secure on the cloud.
Learn more
Learn more
.png){kind=logo}
For those who want to learn from the industry's first benchmark for measuring Zero Trust skill sets, the CCZT includes foundational Zero Trust components released by CISA and NIST, innovative work in the Software-Defined Perimeter by CSA Research, and guidance from renowned Zero Trust experts such as John Kindervag, Founder of the Zero Trust philosophy.
Learn more
Learn more