In the rapidly evolving digital landscape, two social media giants, X (the platform formerly known as Twitter) and LinkedIn, are reportedly on the brink of embracing passkeys, a revolutionary method that allows users to access their accounts without the need for a password.
This intriguing development was unearthed by iOS developer Steve Mosher, who discovered code within both services suggesting imminent compatibility with this cutting-edge technology. The standards for passkeys are dictated by the FIDO2 specifications, overseen by the FIDO alliance. The FIDO alliance, boasting board-level representation from tech behemoths like Apple, Google, and Microsoft, champions the use of passkeys across their respective platforms. However, the adoption of passkeys outside these tech powerhouses remains relatively sparse.
A handful of other notable services, including BestBuy, eBay, and PayPal, have also embraced passkeys, and it seems the technology’s reach is gradually expanding. Recent findings revealed a beta version of WhatsApp featuring a settings menu related to passkeys, indicating that future iterations of the encrypted messaging app are likely to support this technology. Passkeys offer a dual advantage: convenience and enhanced security. Users are spared the task of remembering passwords, and the technology is resistant to phishing attacks as it eliminates the need for extractable credentials. The keys used are known to no one.
The private key is cryptographically stored on the user’s device and, when paired with the service’s public key, grants account access. The only requirement for login verification is the security measure in place on the user’s device, such as a fingerprint, facial recognition, or PIN. Despite the generally positive outlook on the adoption of passkeys and their potential to replace passwords, some concerns linger. Critics argue that big tech companies are monopolizing passkeys, effectively trapping users within their platforms as passkeys are not universally usable across different platforms.
However, many top-tier password managers are beginning to support passkey storage, potentially enabling cross-platform usage. Another lingering question is the extent and speed of passkey adoption across all user services. Security expert Roger Grimes speculates that traditional passwords may still linger for another decade or so.