As LastPass continues on its journey to passwordless, we’re excited to announce that support for passkeys is coming soon. You’ll be able to create, save, and access passkeys right in your LastPass vault, alongside your passwords and other secure credentials. And because LastPass is a password manager with universal access, you’ll be able to sync and share across devices, browsers, and operating systems – it won’t matter where your passkey originated or what device you’re using to log in.Let’s dive into what a passkey is and how LastPass will support them as we continue to evolve from passwords to passwordless.
What is a passkey?
Simply put: A passkey is a login method that completely eliminates the need for a password. It is truly passwordless authentication. And, unlike passwords, passkeys are easy to use, and always strong and phishing resistant.Technically speaking, a passkey is a cryptographic key pair consisting of one public key (shared with the relying party website) and one private key (stored only on the end-user device) to authenticate the user and login. Both keys are needed to authenticate, meaning that without physical access to the end-user device, access to a passkey-protected account is impossible. If the relying party website is breached, for example, there is no risk of stolen data since the website only stores the public key. When you set up a passkey to access a website, the typical password authentication mechanism is replaced with the cryptographic key pair, meaning there is truly no password involved, even in the backend.
How do passkeys work with your LastPass vault?
Storage and use of a passkey to log into sites in your vault will closely mirror the login experience of using a password – but what is happening in the background is much more secure. Cryptographic key pairs use the strong user authentication framework of FIDO2 industry standards and protocols, which means you’re meeting some of the strongest security standards when it comes to passwordless authentication. Curious to see passkeys in action? Check out the video below to see how LastPass will support saving, accessing, and sharing passkeys.With LastPass support for creating, saving, and accessing passkeys coming soon, it will be easy for you to leverage passkeys across web, extension, and mobile. When 80% of data breaches are the result of compromised login credentials, reducing your reliance on passwords translates to better protection from hackers and bad actors.A passwordless future is approaching fast – LastPass is here to support you on every step of your journey.
