Glossary: Identity and Access Management

passkey

Also written: passkeys

A sign-in key pair made for one website under the FIDO2 standards. The device keeps the private key and signs a fresh challenge plus the site's origin. Because there is no shared secret and nothing to replay, it can't be phished.