Users are prompted by Google to create passkeys for safe login

In order to make passwords more secure, Google has introduced passkeys. Users will configure passkeys for their gadgets, using biometric authentication to avoid phishing attacks. Google wants to replace passwords with biometric authentication and public key cryptography. Companies like WhatsApp, Uber, and eBay have embraced Passkeys, which provides a second method of verification.

A passkey is a Fast IDentity Online (FIDO) secret that is stored on a device like a smartphone or a password that can be used to log in to websites, services, and apps. Instead of relying on passwords, it uses public key cryptography and biometric authentication on the smartphone.

A new option called “Skip password when possible” will be enabled in Google account, and the company will prompt to create a passkey when attempt to sign in to account in the future. Doing so will save a passkey to the device that can be used securely — using a form of authentication, such as facial recognition, a fingerprint scan or a device PIN to authenticate the identity.

In a separate post, Google explains that the company plans to completely eliminate passwords in the future, along with what it calls "Band-Aids" that were created to make up for insecure passwords like multi-factor authentication apps and SMS codes. The private key stored on the device will be used in tandem with public cryptography to confirm the identity, without actually revealing the contents of the passkey to the server. 

Passkeys are also safer than regular passwords because they don't require users to remember long and unique passwords for various web services. Instead, the system uses two components to authenticate — your device, where the passkey is stored, and biometrics. This means that passkeys also offer a second form of authentication that confirms users are in possession of the device — as some users might have concerns about what happens if their device is stolen.