Cybersecurity glossary
What is passkey?
Also known as: passkeys, FIDO2, WebAuthn, security key
Definition
A passkey is a phishing-resistant sign-in credential based on public-key cryptography, stored on a device or in a password manager and unlocked with a biometric or device PIN.
Why it matters
Passkeys are bound to the real website’s domain and the site stores only a public key, so they resist phishing and server breaches. They are based on FIDO Alliance and W3C WebAuthn standards.
Common questions about passkey
- What is multi-factor authentication and do I need it?
- Is SMS two-factor authentication safe?
- What is a passkey and is it better than a password?
- What are the differences between using an authenticator app and a security key for two‑factor authentication?
- What is the difference between an authenticator app and a passkey?
- Can passkeys be hacked?
- Can two-factor authentication be turned off?
See also
Sources
Related Guides
GuidePersonal Security
How to Run a Security Scan on iPhone: Step-by-Step Audit
Learn how to run a security scan on iPhone. Audit permissions, verify iOS updates, check compromised passwords, and inspect device profiles.
Read more GuideGRC
How to Run a Security Awareness Training Program That Changes Behaviour
Build a security awareness and training program that changes behaviour: role-based content, phishing simulations done fairly, policy acknowledgement, metrics that matter and reporting to leadership.
Read more GuideSmall Business Security
Business Email Compromise: How It Works and How to Stop It
Learn how business email compromise attacks target finance teams and discover concrete controls, verification rules, and policies to protect your company.
Read more GuidePersonal Security
How to QR Code Scan in Laptop: Step-by-Step Guide
Learn how to QR code scan in laptop systems using your webcam, screenshot captures, or offline tools. Inspect URLs safely and block phishing risks.
Read more