Definition of passkey


Introduction

Passkeys are a replacement for passwords. They enable faster sign-in, are easier to use, and are much more secure.

Additionally, passkeys can serve as a multifactor authentication (MFA) method when combined with device biometrics or a PIN.

Light gray rounded-square icon with a black silhouette of a person. A key sits centered on a dark blue textured background.

Explanation

Overview

Passkeys have been shown to both reduce sign-in complexity and increase account security. A passkey is a way to sign in to a website account or an app without needing to remember a password. Instead of a password, a passkey uses the biometrics that you already have set up on your device to identify you, or a security key with a PIN.

Passkeys are considered a form of MFA. When you use a passkey, you must use a device that stores the passkey (something you have) and unlock it with biometrics or a PIN (something you are or something you know). Because of this, when you sign in using a passkey, you will not need to provide your eRaider password. You still have an eRaider password after registering a passkey, but you may use the passkey instead on sites that use modern authentication (at Texas Tech University, this means the Microsoft sign-in experience).

Security

Passkeys are phishing-resistant. It is impossible for an account holder to present their passkeys to a malicious website using an attacker's domain; the passkey device won't allow it.

Passkeys are an Internet standard-based way to replace passwords with an easy-to-use strong credential. The resulting passkey reduces the ability of attackers to complete phishing attacks.

Getting started

You can create and save passkeys for any websites or apps that support them. At TTU, this includes any site that uses the Microsoft sign-in for your eRaider account. To get started, follow the instructions for setting up MFA (look at the "Passkeys" section).

IMPORTANT: Device-bound passkey options, such as Microsoft Authenticator, do not sync across your devices. If you get a new mobile phone, for instance, you will not be able to use the new phone to sign in to TTU services unless you take steps to set up the passkey on the new phone before getting rid of your previous phone. For this reason, synced passkeys stored in a password manager may be a better option for most users.

NOTE: At TTU, passkeys are not supported with Windows Hello at this time.

Additional resources