How passkeys work—and why they matter
Passkeys use standards developed by the FIDO Alliance and World Wide Web Consortium (W3C). They rely on a cryptographic system that generates a unique public-private key pair for each user account and device. The private key stays securely stored on the user’s device, while the public key is registered with Facebook. This approach is designed to be resistant to phishing, replay attacks, and credential theft.
“Passkeys are an upgrade in security compared to traditional passwords and one-time SMS codes, which can be stolen or phished,” Meta said in its announcement. While users are encouraged to switch to passkeys, fallback methods—including traditional passwords, hardware security keys, and two-factor authentication—remain available for those who have not yet upgraded or whose devices do not support the feature.
For now, the rollout is limited to mobile platforms. Meta has not announced when or whether passkey support will extend to desktop logins via the web. Apple device users will find their passkeys stored automatically in the Passwords app and synced through iCloud Keychain. Android users get similar support through Google Password Manager.
Part of a broader industry shift
The launch continues Meta’s gradual adoption of passwordless login tools, following the October 2023 introduction of passkey support for WhatsApp. Facebook’s mobile implementation marks the company’s latest move toward more secure and user-friendly authentication methods.
Other major companies have also embraced passkeys in recent months. Microsoft made passwordless sign-in the default for new accounts last month, and Visa launched its Payment Passkey program for online purchases in 2024. The FIDO Alliance, which oversees passkey standards, predicts the technology will see major breakthroughs across banking, travel, and payments in the coming year. “With billions of user accounts supporting passkeys, 2025 will be a pivotal year,” said Andrew Shikiar, CEO of the FIDO Alliance, in a statement on World Passkey Day.
Meta says it plans to expand passkey support to Messenger in the coming months, followed by encrypted chats and Meta Pay. As adoption widens, passkeys could replace passwords as the default method for logging in to many digital services.
Sources: Meta Newsroom, MacRumors, iPhone in Canada
—
By Ali Nassar-Smith
