App Logo

Download Our App

Shop your way

logologo
Image
Technology
Artificial intelligence
Technology & Tools
Programming & Developments
Technical Articles
Gaming
Mobile

Passkeys Are Replacing Passwords

05/31/2026By: ICN Writer
Passkeys Are Replacing Passwords

Why passwords are failing at scale

Passwords were designed for a smaller, simpler internet. Today, most people manage dozens of accounts across phones, laptops, smart TVs, and work tools. That volume pushes users toward predictable patterns, reused phrases, or saving credentials in insecure places. Even when a password is strong, it can still be exposed through phishing pages that mimic real services, data breaches at third-party sites, or malware that captures what you type. The result is a security model that depends heavily on perfect user behavior, which is unrealistic at consumer and enterprise scale. Organizations try to compensate with complexity rules, forced resets, and security questions, but these measures often backfire. Frequent changes encourage minor edits rather than truly new secrets, and security questions can be guessed or found in public data. Multi-factor authentication helps, yet many implementations still rely on one-time codes that can be intercepted or socially engineered. The industry has been looking for a way to reduce reliance on shared secrets entirely, and that search is what made passkeys a practical mainstream option.

What a passkey is in plain terms

A passkey is a modern login method that uses cryptography instead of a memorized password. When you create a passkey for a service, your device generates a pair of digital keys: one stays on your device (private key) and the other is stored by the service (public key). The private key never leaves your device. To sign in, the service sends a challenge, and your device proves it has the matching private key by signing that challenge. You typically confirm the action with a fingerprint, face scan, or device PIN. This design changes the economics of account theft. A phishing site cannot trick you into “typing” a passkey because there is nothing to type, and the cryptographic proof is tied to the real domain of the service. If a company’s database is breached, the attacker only gets public keys, which are not useful for logging in. Passkeys also reduce support costs related to password resets and lockouts. In practice, the user experience is closer to unlocking your phone than remembering a secret, which is why major platforms have pushed hard to make it the default option.

Where passkeys work today

Passkeys are no longer experimental. Many consumer services now offer them as an alternative to passwords, especially for accounts that protect payments, personal data, or business access. On modern phones and computers, passkeys can sync across a user’s devices through platform credential managers, making it possible to sign in on a new device without starting from scratch. Cross-device sign-in is also improving: you can approve a login on a nearby phone to access an account on a laptop, which is useful in shared or temporary environments. Adoption is uneven, though. Some services still require a password as a fallback, and others support passkeys only on certain platforms. Enterprises are also moving at different speeds depending on compliance requirements, device management policies, and legacy authentication systems. The practical takeaway is that passkeys are ready for everyday use, but users should expect a transition period where both methods coexist. That coexistence is not a failure; it is a realistic migration path for large ecosystems that cannot switch overnight.

Security gains and the new risks

The biggest security gain is resistance to phishing and credential reuse. Because passkeys are tied to a specific service and validated cryptographically, the classic “enter your password here” trap becomes far less effective. Another gain is breach impact reduction: stolen password databases can be used directly for account takeover, while stolen public keys cannot. Passkeys also encourage stronger account hygiene because users are not tempted to pick easy secrets or reuse them across sites. However, passkeys shift some risk toward device and account recovery. If an attacker gains control of your unlocked device, they may be able to approve logins, depending on how your device is secured. Recovery becomes critical: losing access to your phone and your cloud account at the same time can lock you out. There are also operational risks for organizations, such as ensuring employees can recover access without creating help-desk loopholes. The best implementations combine passkeys with strong device protection, clear recovery options, and visibility into account changes. In other words, passkeys reduce a major class of attacks, but they do not eliminate the need for disciplined security practices.

How to adopt passkeys without disruption

For individuals, the smoothest approach is incremental. Start with your primary email account and any account that controls payments or identity, because those are the most valuable targets. Enable a passkey, keep an updated recovery method, and verify that your device lock is strong (a long PIN or biometric with fallback). If you use multiple devices, confirm that passkeys sync correctly and that you can sign in on a secondary device before you rely on the new method. For organizations, adoption works best as a staged program. Identify high-risk groups first, such as administrators and finance teams, then expand to the wider workforce. Update onboarding so new employees create passkeys on managed devices, and define a recovery workflow that includes identity verification and audit logs. Keep a temporary fallback during the transition, but set a timeline to reduce password dependence. Training should focus on practical steps: recognizing legitimate prompts, protecting device unlock methods, and reporting lost devices quickly. The goal is not only to deploy a feature, but to reduce account takeover risk while maintaining productivity.

bookmark

Passkeys represent a concrete shift in how the internet authenticates people. They replace a fragile shared secret with device-based cryptographic proof, improving security while often making sign-in faster. The near-term reality is hybrid: many services will support both passwords and passkeys, and users will need to manage recovery and device security more thoughtfully. Over time, as more platforms standardize cross-device sign-in and more services remove password fallbacks, the everyday experience of logging in should become both simpler and harder to exploit. A practical next step is to pick two accounts this week and enable passkeys, then test recovery and secondary-device access. That small exercise reveals whether your devices, cloud accounts, and security settings are ready for a password-light future. The technology is already here; the remaining work is careful rollout, clear recovery planning, and consistent user habits.

* All articles published on this blog are sourced from various websites and are provided for informational purposes only. They should not be considered as confirmed studies or accurate information. Please verify the information independently before relying on it.

Similar ARTICLES

Digital Skills Employers Actually Hire For
Digital Skills Employers Actually Hire For
Digital skills are no longer limited to “knowing software.” Employers now look for people who can improve speed, accuracy, and decision-making across everyday workflows. In many roles, the strongest signal is not the number of tools you list, but whether you can connect data, automate repetitive steps, and communicate results clearly. Hiring teams increasingly evaluate candidates through practical tasks: cleaning a dataset, building a dashboard, writing a short automation script, or drafting a measurement plan for a marketing campaign. Even non-technical departments use digital assessments, because most work now touches cloud platforms, shared documents, and analytics. Another shift is that job descriptions often bundle skills. A single role may require basic data analysis, collaboration in cloud tools, and awareness of security practices. This means candidates who can demonstrate “end-to-end” capability—collect, process, analyze, and present—stand out faster than those who only know one isolated tool.
When Kids Use Video Games Wisely
When Kids Use Video Games Wisely
Many parents ask whether video games can offer real benefits, or if they are only a distraction. The most accurate answer is that outcomes depend on the type of game, the child’s age, and how play is managed at home. Games are not a single category: a cooperative puzzle game, a creative building game, and a fast competitive shooter do not train the same skills or habits. The same child can also react differently depending on sleep, school workload, and temperament. A practical way to think about benefits is to focus on measurable areas: attention control, problem-solving, language exposure, social cooperation, and motivation. Benefits are more likely when games are age-appropriate, time-limited, and combined with offline routines like reading, sports, and family time. In other words, games can be one tool in a broader learning environment, not a replacement for it. This article focuses on potential advantages of electronic games for children, and how parents can increase the chance of positive outcomes through selection and daily rules. It also highlights warning signs that suggest a need to adjust the plan, such as sleep disruption, declining grades, or frequent conflict over screen time.
WhatsApp Usernames and Number Privacy
WhatsApp Usernames and Number Privacy
WhatsApp’s official rollout of usernames introduces a new way to connect without automatically exposing your phone number. Until now, the app’s identity model was tied to a number, which meant that joining a group, starting a chat from a link, or messaging someone new often revealed your digits by default. With usernames, WhatsApp adds a public-facing handle that can be shared instead of a number, making it easier to keep personal contact details private in everyday situations. The feature is designed for common scenarios: joining community groups, coordinating with customers or classmates, or responding to a message request without handing out your number. In practice, a username becomes the primary “shareable” identity, while the phone number remains the account anchor behind the scenes for registration, security, and recovery. This separation is especially useful for people who use WhatsApp widely but prefer to limit how broadly their number circulates. It is important to set expectations. A username does not turn WhatsApp into an anonymous service, and it does not remove the need for a phone number to create an account. It also does not automatically hide your number from everyone in every context. Privacy depends on how you configure visibility settings, how you start conversations, and whether the other person already has your number saved. The benefit is that you gain a practical option to share a handle first, and reveal your number only when you choose.
WhatsApp Beta Adds the Green Dot
WhatsApp Beta Adds the Green Dot
WhatsApp’s beta channel has begun showing a small green dot in parts of the interface, signaling a new layer of status visibility inside the app. The indicator is designed to be quick to notice without interrupting the chat experience, and it appears as a compact dot rather than a banner or pop-up. In practical terms, it functions as a visual cue tied to activity or availability signals that WhatsApp already manages in the background. The green dot is not a standalone feature by itself; it is an interface element that helps users interpret what is happening at a glance. WhatsApp has long offered last seen, online status, and read receipts, but those signals are distributed across different screens and depend on privacy settings. The new dot aims to reduce the need to open a profile or wait for a text update by placing a minimal indicator where users naturally look while navigating chats. Because this is appearing in the experimental build, the exact behavior can vary between testers. Some users may see it only in specific areas such as the chat list or within a conversation header, while others may not see it at all yet. That variability is typical for beta rollouts, where features are enabled server-side in waves to measure performance and user understanding before a wider release.
Passkeys Are Replacing Passwords Fast
Passkeys Are Replacing Passwords Fast
Passkeys have moved from a niche security feature to a mainstream login option because the biggest platforms now support them by default. Apple, Google, and Microsoft have aligned on standards that let a passkey work across devices and services without forcing users to learn a new workflow. Instead of creating and remembering a password, you confirm your identity on a device you already trust, typically with a fingerprint, face scan, or device PIN. That shift matters because most account takeovers still start with weak or reused passwords, or with phishing that tricks people into typing credentials into fake pages. The timing is also practical: people now log in on phones more than desktops, and phones are built around secure hardware and biometric checks. Passkeys fit that reality. They reduce friction for users while raising the bar for attackers, because there is no password to steal, reuse, or guess. For organizations, passkeys promise fewer password resets and fewer support tickets, which is a direct cost reduction. The result is a rare security upgrade that can also feel like a convenience upgrade, and that combination is why adoption is accelerating.
UK Under-16 Social Media Ban Explained
UK Under-16 Social Media Ban Explained
Britain is moving toward restricting access to social media for anyone under 16, framing the measure as a child-safety and online-harms intervention rather than a general internet ban. In practical terms, the policy discussion focuses on preventing under-16s from holding accounts on mainstream social platforms and limiting the ability of platforms to recommend content, connect strangers, or deliver targeted features to minors. The details that matter are operational: which services count as “social media,” whether messaging apps are included, and how platforms must verify age. Most proposals in this space distinguish between open social networks that rely on feeds, recommendations, and public sharing, and services that are primarily private communications. The UK’s approach is expected to lean on existing online-safety obligations, using enforcement tools that already exist for platforms that fail to protect children. A key point is that the policy is not only about blocking access. It is also about shifting responsibility to companies to design safer defaults, reduce exposure to harmful content, and prove compliance. That means the ban discussion is tightly linked to age assurance, content moderation standards, and the design of recommendation systems.
WhatsApp Tightens Message Copy and Capture
WhatsApp Tightens Message Copy and Capture
WhatsApp is reinforcing privacy by limiting two everyday actions that often lead to unintended sharing: copying messages and capturing them as screenshots or screen recordings. While the app has long relied on end-to-end encryption to protect content in transit, encryption does not stop a recipient from duplicating what they can already see. The new direction targets that gap by reducing the ease of turning private chats into shareable snippets. The practical impact is most visible in sensitive conversations: personal identifiers, one-time codes, addresses, medical details, and private work discussions. In many cases, the harm does not come from hacking but from casual forwarding, copying into another app, or saving a screenshot “just in case.” By adding friction to these actions, WhatsApp is signaling that privacy is not only about secure delivery, but also about limiting downstream exposure. These changes also reflect broader user expectations. People increasingly treat messaging apps as a place for semi-formal communication—receipts, confirmations, customer support, and workplace coordination. When conversations carry higher stakes, users want clearer boundaries around what can be extracted and stored. WhatsApp’s move aligns with that shift by making it harder to convert chat content into permanent, easily redistributed files. Importantly, such restrictions are rarely absolute. They may apply to specific chat types, certain media formats, or accounts with enhanced privacy settings. Users should expect a phased rollout, with differences by device, operating system, and app version. The headline is simple—less copying and capturing—but the real story is how these controls fit into WhatsApp’s broader privacy toolkit.
Mobile Apps Worth Trying This Year
Mobile Apps Worth Trying This Year
Before downloading anything, define the job you want the app to do: manage tasks, edit photos, learn a skill, or reduce screen time. Check the update history and release notes; apps that ship improvements every few weeks tend to fix bugs faster and keep up with new phone features. Read recent reviews, not only the overall rating, and look for patterns such as battery drain, login problems, or aggressive ads. Privacy and cost matter as much as features. Review permissions and avoid apps that request access unrelated to their purpose, such as a flashlight asking for contacts. Prefer services with clear data controls, export options, and two-factor authentication. For paid plans, compare what is included: cloud storage limits, collaboration features, offline access, and customer support. A good rule is to test the free tier for a week, then decide whether the subscription saves time or replaces another tool you already pay for.
Passkeys Are Replacing Passwords
Passkeys Are Replacing Passwords
Passwords are still the default gatekeeper for most apps and websites, but they are showing their age. People reuse the same password across services because remembering dozens of strong, unique strings is unrealistic. That habit turns a single data breach into a chain reaction: once one account is exposed, attackers try the same credentials elsewhere. Even when users pick unique passwords, phishing pages can capture them in seconds, and many victims cannot tell a convincing fake login screen from a real one. Organizations try to compensate with complexity rules and frequent resets, yet those measures often backfire. Forced rotations encourage predictable patterns, and complexity requirements push users toward writing passwords down or storing them insecurely. Multi-factor authentication helps, but SMS codes can be intercepted and app-based codes still rely on the user recognizing a legitimate login prompt. The result is a system that is expensive to support, frustrating to use, and still vulnerable to common attacks.
Passkeys Are Replacing Passwords Faster Than You Think
Passkeys Are Replacing Passwords Faster Than You Think
Passwords are still the default for many services, but they are increasingly mismatched with how people actually use technology. Most users manage dozens of accounts across phones, laptops, TVs, and work tools, which leads to predictable behavior: reused passwords, simple patterns, and storing credentials in insecure places. Even when a service enforces complexity rules, the result is often a password that is hard to remember and easy to mishandle. The operational cost is also high: password resets remain one of the most common support requests in consumer apps and enterprise IT. Security weaknesses are not only about guessing. Phishing pages, fake login prompts, and malicious browser extensions can capture passwords even when they are long and unique. Multi-factor authentication helps, but it adds friction and is not consistently adopted. SMS codes can be intercepted or delayed, and authenticator apps still depend on the user recognizing a scam. In practice, passwords create a fragile chain where the strongest link is often the user’s attention at the worst possible moment. This is why the industry is moving toward a model where there is no secret for the user to type or share.
Passkeys in Practice for Everyday Security
Passkeys in Practice for Everyday Security
Passwords are still the default login method for most services, but they are increasingly mismatched with how people actually use the internet. Many users manage dozens of accounts across phones, laptops, smart TVs, and work devices, which pushes them toward reusing the same password or choosing short, memorable phrases. That behavior makes large-scale credential leaks more damaging, because one exposed password can unlock multiple services. Even when a password is unique, it can be captured through convincing fake login pages or intercepted on compromised devices. Two-factor authentication improved the situation, yet it also introduced friction and new points of failure. SMS codes can be delayed or blocked, authenticator apps can be lost during phone changes, and push approvals can be mis-tapped when users are distracted. Support teams spend time on account recovery, and users lose confidence when they are locked out. The result is a login system that is both insecure and inconvenient, which is exactly the combination attackers benefit from. Passkeys are emerging as a practical replacement because they remove the shared secret. Instead of typing a password that can be stolen and reused, a passkey relies on cryptographic keys stored on a device and unlocked with a local method such as fingerprint, face recognition, or a device PIN. This shift changes the economics of account takeover: there is no password to phish, and the login is tied to the legitimate website or app.
Passkeys Are Replacing Passwords Fast
Passkeys Are Replacing Passwords Fast
Passwords were designed for a simpler internet, but today they are a weak link for both people and organizations. Most users still reuse the same password across multiple services, which means a single leak can unlock email, shopping accounts, and cloud storage. Even when people try to be careful, long and complex passwords are hard to remember, so they end up written in notes apps, browsers, or spreadsheets. Attackers also take advantage of automated guessing and credential-stuffing tools that test stolen logins at massive scale. On the business side, password resets create real costs: help desks spend time verifying identity, employees lose productivity, and security teams deal with account takeover investigations. Multi-factor authentication helps, but it is not always enabled, and SMS codes can be unreliable when phones change, roaming fails, or messages are delayed. The result is a daily friction point that still does not deliver consistent security.
Private 5G Networks for Modern Factories
Private 5G Networks for Modern Factories
Manufacturers are adopting private 5G because it offers predictable wireless performance inside facilities where Wi‑Fi often struggles with interference, roaming gaps, and congestion. A private 5G network is built for a specific site or campus, with dedicated radio resources, controlled device access, and service levels that can be engineered for production needs. That matters for operations such as automated guided vehicles, machine vision inspection, and real-time monitoring of equipment, where a few seconds of dropouts can disrupt workflows. Another driver is the growth of connected assets. A single plant can have thousands of sensors, handheld terminals, cameras, and mobile robots. Private 5G is designed to manage large device populations with consistent authentication and policy control. It also supports mobility across wide areas, including yards and warehouses, without relying on multiple Wi‑Fi access points and complex tuning. For many factories, the goal is not to replace every existing network, but to add a wireless layer that is easier to govern and more aligned with industrial uptime expectations.
By clicking the SUBSCRIBE button, you are agreeing to our Privacy & Cookie Policy If you want to unsubsribe the marketing email, please proceed to our privacy center.
Download The ICN App
Download on the App StoreDownload on Huawei AppGalleryGet it on Google Play
FacebookX (Twitter)InstagramYouTubeLinkedInTikTokthreadsSnapchat
Nobar Trading Investment Company (PLC)
Stock Information on the Amman Stock Exchange
Follow Us
qr
© 2005-2026 ICN. All Rights Reserved.