Germany’s Federal Office for Information Security (BSI) has announced plans to phase out passwords in favor of passkeys for government services, according to WebProNews. The move, disclosed on October 1, 2025, positions passkeys as the primary login method across federal digital platforms. The program is part of Germany’s alignment with eIDAS 2.0 and is intended to reduce phishing and credential-stuffing risks.
The initiative centers on FIDO2/WebAuthn standards, enabling authentication with device biometrics or hardware security keys. BSI has said that pilot programs will begin in 2026, with fuller integration targeted for 2027. As part of the rollout, German agencies will receive guidance on adopting passkeys, while private-sector firms connected to government portals are being encouraged to prepare for passwordless authentication.
Reports from TechRadar confirm that BSI’s guidance recognizes both device-bound and synced passkeys as phishing-resistant options. Device-bound passkeys use local credentials such as Touch ID or Windows Hello, while synced passkeys can be tied to cloud accounts for multi-device use. Both are positioned as more secure alternatives to password-based logins.
For citizens, the transition means government services will be unlocked through fingerprints, face recognition, or hardware keys, reducing reliance on vulnerable shared secrets. For agencies, the approach provides compliance with EU authentication requirements and lowers the risk of account takeovers. The adoption is also expected to influence banks, insurers, and utilities that integrate with government platforms, steering them toward compatible authentication flows.
Passkeys function as an authentication layer that can integrate with Germany’s BundID account system and with the upcoming EU Digital Identity Wallet. This setup would allow citizens to use strong, password-free logins alongside verifiable credentials when accessing public services. BSI is expected to publish a formal technical profile addressing assurance levels, recovery methods, and enterprise enrollment to support broad adoption.
Sources: WebProNews, TechRadar
–
By Ji-seo Kim
