TomoLink
CompaniesSwiggySystem DesignIs PassKey Shaping a Passwordless Future?
System Design
Mediumsecurity

Is PassKey Shaping a Passwordless Future?

30 minsAuthenticationPasskeys
30 mins
1 sections
Authentication, Passkeys

Overview

Google recently announced PassKey support for both Android and Chrome.

Passkey, also backed by Apple and Microsoft, is claimed to be a significantly safer replacement for passwords.

How PassKeys Work

  • Step 1 - Create PassKeys

The end-user needs to confirm the account information and present their credentials (face ID, touch ID, etc.).

A private key is generated based on the public key provided by the website. The private key is stored on the device.

  • Step 2 - Sign in with PassKeys on devices

When the user tries to sign in to a website, they use the generated private key. Just select the account information and present the credentials to unlock the private key.

Consequently, there is no risk of password leakage since no passwords are stored in the websites' databases.

Passkeys are built on industry standards, and it works across different platforms and browsers - including Windows, macOS and iOS, and ChromeOS, with a uniform user experience.

Is PassKey Shaping a Passwordless Future? [Medium] | Swiggy System_design | TomoLink