The Future of Authentication

Passwords may eventually become obsolete. Passkeys, backed by Apple, Google, and Microsoft, use cryptographic key pairs stored on your device instead of memorized strings. You log in with your fingerprint or face, and the handshake happens invisibly.

Unlike passwords, passkeys are strongly phishing-resistant, do not expose a reusable secret in a website breach, and cannot be guessed through brute force. They are bound to one specific website, so a fake login page should not receive a valid passkey response.

The switch will take years, since billions of accounts still rely on passwords. Until then, a password manager with strong, unique passwords remains your best defense.