The FIDO Alliance, an association that has been working on new authentication methods to replace traditional passwords, announced last month that Apple, Google and Microsoft are committed to extending support for FIDO Standard to their platforms. At WWDC 2022, Apple revealed that iOS 16 and macOS 13 finally allow password-free sign-in with “password keys.”
In fact, iOS 15 and macOS 12 already support FIDO Standard. However, the above implementation requires the user to log in to each application or website on each device before enabling a passwordless login method. Now, with the latest software from Apple, login without a password has become a reality.
As Apple detailed in a WWDC 2022 session, both iOS 16 and macOS 13 now have “passwords,” which is what is called this authentication method. With passwords, users no longer have to enter a username and password to sign in to apps and websites, which reduces the chances of being tricked by phishing attacks.
How iOS Passwords work
For users, signing in with a passkey will work in much the same way as signing in with your iCloud keychain and Face ID or Touch ID. Just choose a credential, authenticate with biometrics and you’re done. However, while iCloud Keychain basically automatically fills in your username and password in plain text fields, a passkey goes much further.
The system generates a unique key that can only be accessed with user authentication using Face ID or Touch ID. This prevents malicious websites from attempting to steal your passwords, as the keys are securely stored in the iCloud keychain and are not visible to the user.
Of course, passwords are automatically synced to your Apple devices, but what about other platforms? Because the keys are based on the FIDO standard, which is also being implemented on Android and Windows, there is a way to sign in on a device other than your own.
The other device generates a QR code that your iPhone or iPad can read. iOS uses Face ID or Touch ID to confirm that you’re trying to sign in before confirming or denying the request to the app or website running on the other device. And when it comes to an iOS or Mac device other than yours, the keys can be shared via AirDrop.
Availability and implementation
Because this is a new API, passwords require developers to update their applications and websites to support the new standard, so it may take some time before this technology becomes popular. However, Apple has provided extensive documentation to help developers deploy passwords to their iOS and macOS applications.
IOS 16 and macOS 13 are currently available as beta software for developers through Apple’s developer website. A public beta will be released next month, while the official release is expected this fall.
FTC: We use automatic affiliate links to earn revenue. Month.
Check out 9to5Mac on YouTube for more Apple news: