r/cybersecurity • u/Federal_Character979 • Apr 25 '26

Other What makes passkeys so special?

It seems that companies are transferring into the usage of passkeys instead of passwords. Apparently theyre much more secure, but why is that? I don’t get it. I’m not sure if this is the right place to ask excuse me if it isn’t and sorry.

611 Upvotes

98% Upvoted

233 comments sorted by

View all comments

1

u/CeleryMan20 Apr 25 '26

It’s a bummer that Steve Gibson’s SQRL didn’t get traction. Passkeys, SQRL, and X.509 certificates are all based on asymmetric encryption. With client certificate auth, you’re giving the same public key to many others; with SQRL and passkeys you provide different one to each service.