App Logo

Download Our App

Shop your way

logologo
Image
Technology
Artificial intelligence
Technology & Tools
Programming & Developments
Technical Articles
Gaming
Mobile

Passkeys Are Replacing Passwords Fast

06/28/2026By: ICN Writer
Passkeys Are Replacing Passwords Fast

Why passkeys are suddenly everywhere

Passkeys have moved from a niche security feature to a mainstream login option because the biggest platforms now support them by default. Apple, Google, and Microsoft have aligned on standards that let a passkey work across devices and services without forcing users to learn a new workflow. Instead of creating and remembering a password, you confirm your identity on a device you already trust, typically with a fingerprint, face scan, or device PIN. That shift matters because most account takeovers still start with weak or reused passwords, or with phishing that tricks people into typing credentials into fake pages. The timing is also practical: people now log in on phones more than desktops, and phones are built around secure hardware and biometric checks. Passkeys fit that reality. They reduce friction for users while raising the bar for attackers, because there is no password to steal, reuse, or guess. For organizations, passkeys promise fewer password resets and fewer support tickets, which is a direct cost reduction. The result is a rare security upgrade that can also feel like a convenience upgrade, and that combination is why adoption is accelerating.

How passkeys work in plain terms

A passkey is based on public-key cryptography, but you do not need to understand the math to understand the behavior. When you create a passkey for a website or app, your device generates a pair of digital keys: one stays on your device (the private key) and one is shared with the service (the public key). The private key never leaves your device. When you log in, the service sends a challenge, and your device proves it has the matching private key by signing that challenge. Your fingerprint or face scan is not sent to the website; it is used locally to unlock the private key on your device. This design changes the phishing equation. A fake website can ask for a password and capture it, but it cannot easily trick your device into signing a login challenge for the real service, because the passkey is tied to the correct domain or app. It also changes the breach equation. If a service’s database is stolen, attackers get public keys, which are not useful for logging in. That does not eliminate every risk, but it removes the most common failure mode: shared secrets stored on servers and typed by humans.

What changes for everyday users

For most people, the biggest change is that “login” becomes a quick confirmation rather than a typing task. On a phone, it often looks like: choose passkey, confirm with Face ID or fingerprint, and you are in. On a laptop, you might confirm with the laptop’s biometric sensor, or approve the login from your phone. This reduces the need for password managers in some cases, but it does not make them obsolete, because many services still require passwords and recovery codes. Users should also expect a transition period where accounts offer both passwords and passkeys. During that phase, the security of your account is only as strong as the weakest enabled method. If a service keeps password login active, attackers may still target it with phishing or credential stuffing. A practical step is to enable a passkey and then review account settings to see whether you can disable password login or at least add stronger protections like two-step verification. Another everyday consideration is device loss or replacement. Passkeys are typically synced through a platform’s secure cloud keychain, which helps you sign in on new devices. But you should confirm that sync is enabled and protected with a strong device PIN and account recovery options. The convenience is real, but it depends on keeping your primary device and platform account secure.

What businesses need to plan for

For businesses, passkeys are not just a UI change; they affect identity strategy, support processes, and compliance documentation. The first decision is scope: will passkeys be offered to customers, employees, or both? Customer rollouts need careful UX design and clear recovery paths. Employee rollouts often connect to single sign-on and device management policies, which means IT and security teams must coordinate. A second decision is how to handle account recovery and edge cases. If a user loses access to all devices, the service still needs a secure way to re-establish trust. That can involve verified email or phone steps, but those channels have their own risks and costs. Many organizations will keep multiple factors and step-up verification for sensitive actions like changing payout details or exporting data. Finally, businesses should measure outcomes. Passkeys can reduce password reset volume and fraud attempts, but only if adoption is high and legacy login paths are tightened. Metrics to track include passkey enrollment rate, successful login rate, support tickets per 1,000 users, and the share of suspicious login attempts blocked. Treating passkeys as a product rollout, not a checkbox, is what determines whether they deliver real security and operational benefits.

Common misconceptions and real limitations

A common misconception is that passkeys eliminate the need for any other security measures. In reality, they mainly remove password-related risks, but accounts can still be compromised through malware on a device, social engineering around account recovery, or unauthorized access to a synced platform account. Another misconception is that biometrics are being “stored by websites.” In most implementations, the biometric check stays on the device; the service only receives cryptographic proof. There are also practical limitations. Not every service supports passkeys yet, and some support them only on certain platforms. Cross-device sign-in can confuse users when a QR code appears and the phone is needed to approve a login on a shared computer. Accessibility needs must be considered, because not everyone can or wants to use biometrics, and device PINs must remain an option. Finally, passkeys do not automatically fix poor account hygiene. If users ignore security alerts, reuse email accounts with weak protection, or fail to update recovery information, they can still lose access. Passkeys are a strong building block, but they work best as part of a broader approach that includes secure devices, updated software, and sensible recovery policies.

bookmark

If you want to adopt passkeys without confusion, start with your most important accounts: email, primary cloud storage, and financial services that support them. Create a passkey on a device you control, confirm that it syncs to your other devices, and store any recovery codes in a secure place. Then review each account’s settings to see whether password login can be limited, and keep two-step verification enabled where it adds protection for sensitive actions. For teams, treat passkeys as a phased rollout. Pilot with a small group, document the recovery process, and train support staff on what users will see on different devices. Communicate clearly that passkeys are meant to reduce phishing risk and password fatigue, not to remove accountability for device security. The organizations that get the most value will be the ones that combine passkeys with strong device management, clear user guidance, and measurable adoption targets.

* All articles published on this blog are sourced from various websites and are provided for informational purposes only. They should not be considered as confirmed studies or accurate information. Please verify the information independently before relying on it.

Similar ARTICLES

Digital Skills Employers Actually Hire For
Digital Skills Employers Actually Hire For
Digital skills are no longer limited to “knowing software.” Employers now look for people who can improve speed, accuracy, and decision-making across everyday workflows. In many roles, the strongest signal is not the number of tools you list, but whether you can connect data, automate repetitive steps, and communicate results clearly. Hiring teams increasingly evaluate candidates through practical tasks: cleaning a dataset, building a dashboard, writing a short automation script, or drafting a measurement plan for a marketing campaign. Even non-technical departments use digital assessments, because most work now touches cloud platforms, shared documents, and analytics. Another shift is that job descriptions often bundle skills. A single role may require basic data analysis, collaboration in cloud tools, and awareness of security practices. This means candidates who can demonstrate “end-to-end” capability—collect, process, analyze, and present—stand out faster than those who only know one isolated tool.
When Kids Use Video Games Wisely
When Kids Use Video Games Wisely
Many parents ask whether video games can offer real benefits, or if they are only a distraction. The most accurate answer is that outcomes depend on the type of game, the child’s age, and how play is managed at home. Games are not a single category: a cooperative puzzle game, a creative building game, and a fast competitive shooter do not train the same skills or habits. The same child can also react differently depending on sleep, school workload, and temperament. A practical way to think about benefits is to focus on measurable areas: attention control, problem-solving, language exposure, social cooperation, and motivation. Benefits are more likely when games are age-appropriate, time-limited, and combined with offline routines like reading, sports, and family time. In other words, games can be one tool in a broader learning environment, not a replacement for it. This article focuses on potential advantages of electronic games for children, and how parents can increase the chance of positive outcomes through selection and daily rules. It also highlights warning signs that suggest a need to adjust the plan, such as sleep disruption, declining grades, or frequent conflict over screen time.
WhatsApp Usernames and Number Privacy
WhatsApp Usernames and Number Privacy
WhatsApp’s official rollout of usernames introduces a new way to connect without automatically exposing your phone number. Until now, the app’s identity model was tied to a number, which meant that joining a group, starting a chat from a link, or messaging someone new often revealed your digits by default. With usernames, WhatsApp adds a public-facing handle that can be shared instead of a number, making it easier to keep personal contact details private in everyday situations. The feature is designed for common scenarios: joining community groups, coordinating with customers or classmates, or responding to a message request without handing out your number. In practice, a username becomes the primary “shareable” identity, while the phone number remains the account anchor behind the scenes for registration, security, and recovery. This separation is especially useful for people who use WhatsApp widely but prefer to limit how broadly their number circulates. It is important to set expectations. A username does not turn WhatsApp into an anonymous service, and it does not remove the need for a phone number to create an account. It also does not automatically hide your number from everyone in every context. Privacy depends on how you configure visibility settings, how you start conversations, and whether the other person already has your number saved. The benefit is that you gain a practical option to share a handle first, and reveal your number only when you choose.
WhatsApp Beta Adds the Green Dot
WhatsApp Beta Adds the Green Dot
WhatsApp’s beta channel has begun showing a small green dot in parts of the interface, signaling a new layer of status visibility inside the app. The indicator is designed to be quick to notice without interrupting the chat experience, and it appears as a compact dot rather than a banner or pop-up. In practical terms, it functions as a visual cue tied to activity or availability signals that WhatsApp already manages in the background. The green dot is not a standalone feature by itself; it is an interface element that helps users interpret what is happening at a glance. WhatsApp has long offered last seen, online status, and read receipts, but those signals are distributed across different screens and depend on privacy settings. The new dot aims to reduce the need to open a profile or wait for a text update by placing a minimal indicator where users naturally look while navigating chats. Because this is appearing in the experimental build, the exact behavior can vary between testers. Some users may see it only in specific areas such as the chat list or within a conversation header, while others may not see it at all yet. That variability is typical for beta rollouts, where features are enabled server-side in waves to measure performance and user understanding before a wider release.
UK Under-16 Social Media Ban Explained
UK Under-16 Social Media Ban Explained
Britain is moving toward restricting access to social media for anyone under 16, framing the measure as a child-safety and online-harms intervention rather than a general internet ban. In practical terms, the policy discussion focuses on preventing under-16s from holding accounts on mainstream social platforms and limiting the ability of platforms to recommend content, connect strangers, or deliver targeted features to minors. The details that matter are operational: which services count as “social media,” whether messaging apps are included, and how platforms must verify age. Most proposals in this space distinguish between open social networks that rely on feeds, recommendations, and public sharing, and services that are primarily private communications. The UK’s approach is expected to lean on existing online-safety obligations, using enforcement tools that already exist for platforms that fail to protect children. A key point is that the policy is not only about blocking access. It is also about shifting responsibility to companies to design safer defaults, reduce exposure to harmful content, and prove compliance. That means the ban discussion is tightly linked to age assurance, content moderation standards, and the design of recommendation systems.
WhatsApp Tightens Message Copy and Capture
WhatsApp Tightens Message Copy and Capture
WhatsApp is reinforcing privacy by limiting two everyday actions that often lead to unintended sharing: copying messages and capturing them as screenshots or screen recordings. While the app has long relied on end-to-end encryption to protect content in transit, encryption does not stop a recipient from duplicating what they can already see. The new direction targets that gap by reducing the ease of turning private chats into shareable snippets. The practical impact is most visible in sensitive conversations: personal identifiers, one-time codes, addresses, medical details, and private work discussions. In many cases, the harm does not come from hacking but from casual forwarding, copying into another app, or saving a screenshot “just in case.” By adding friction to these actions, WhatsApp is signaling that privacy is not only about secure delivery, but also about limiting downstream exposure. These changes also reflect broader user expectations. People increasingly treat messaging apps as a place for semi-formal communication—receipts, confirmations, customer support, and workplace coordination. When conversations carry higher stakes, users want clearer boundaries around what can be extracted and stored. WhatsApp’s move aligns with that shift by making it harder to convert chat content into permanent, easily redistributed files. Importantly, such restrictions are rarely absolute. They may apply to specific chat types, certain media formats, or accounts with enhanced privacy settings. Users should expect a phased rollout, with differences by device, operating system, and app version. The headline is simple—less copying and capturing—but the real story is how these controls fit into WhatsApp’s broader privacy toolkit.
Mobile Apps Worth Trying This Year
Mobile Apps Worth Trying This Year
Before downloading anything, define the job you want the app to do: manage tasks, edit photos, learn a skill, or reduce screen time. Check the update history and release notes; apps that ship improvements every few weeks tend to fix bugs faster and keep up with new phone features. Read recent reviews, not only the overall rating, and look for patterns such as battery drain, login problems, or aggressive ads. Privacy and cost matter as much as features. Review permissions and avoid apps that request access unrelated to their purpose, such as a flashlight asking for contacts. Prefer services with clear data controls, export options, and two-factor authentication. For paid plans, compare what is included: cloud storage limits, collaboration features, offline access, and customer support. A good rule is to test the free tier for a week, then decide whether the subscription saves time or replaces another tool you already pay for.
Passkeys Are Replacing Passwords
Passkeys Are Replacing Passwords
Passwords were designed for a smaller, simpler internet. Today, most people manage dozens of accounts across phones, laptops, smart TVs, and work tools. That volume pushes users toward predictable patterns, reused phrases, or saving credentials in insecure places. Even when a password is strong, it can still be exposed through phishing pages that mimic real services, data breaches at third-party sites, or malware that captures what you type. The result is a security model that depends heavily on perfect user behavior, which is unrealistic at consumer and enterprise scale. Organizations try to compensate with complexity rules, forced resets, and security questions, but these measures often backfire. Frequent changes encourage minor edits rather than truly new secrets, and security questions can be guessed or found in public data. Multi-factor authentication helps, yet many implementations still rely on one-time codes that can be intercepted or socially engineered. The industry has been looking for a way to reduce reliance on shared secrets entirely, and that search is what made passkeys a practical mainstream option.
Passkeys Are Replacing Passwords
Passkeys Are Replacing Passwords
Passwords are still the default gatekeeper for most apps and websites, but they are showing their age. People reuse the same password across services because remembering dozens of strong, unique strings is unrealistic. That habit turns a single data breach into a chain reaction: once one account is exposed, attackers try the same credentials elsewhere. Even when users pick unique passwords, phishing pages can capture them in seconds, and many victims cannot tell a convincing fake login screen from a real one. Organizations try to compensate with complexity rules and frequent resets, yet those measures often backfire. Forced rotations encourage predictable patterns, and complexity requirements push users toward writing passwords down or storing them insecurely. Multi-factor authentication helps, but SMS codes can be intercepted and app-based codes still rely on the user recognizing a legitimate login prompt. The result is a system that is expensive to support, frustrating to use, and still vulnerable to common attacks.
Passkeys Are Replacing Passwords Faster Than You Think
Passkeys Are Replacing Passwords Faster Than You Think
Passwords are still the default for many services, but they are increasingly mismatched with how people actually use technology. Most users manage dozens of accounts across phones, laptops, TVs, and work tools, which leads to predictable behavior: reused passwords, simple patterns, and storing credentials in insecure places. Even when a service enforces complexity rules, the result is often a password that is hard to remember and easy to mishandle. The operational cost is also high: password resets remain one of the most common support requests in consumer apps and enterprise IT. Security weaknesses are not only about guessing. Phishing pages, fake login prompts, and malicious browser extensions can capture passwords even when they are long and unique. Multi-factor authentication helps, but it adds friction and is not consistently adopted. SMS codes can be intercepted or delayed, and authenticator apps still depend on the user recognizing a scam. In practice, passwords create a fragile chain where the strongest link is often the user’s attention at the worst possible moment. This is why the industry is moving toward a model where there is no secret for the user to type or share.
Passkeys in Practice for Everyday Security
Passkeys in Practice for Everyday Security
Passwords are still the default login method for most services, but they are increasingly mismatched with how people actually use the internet. Many users manage dozens of accounts across phones, laptops, smart TVs, and work devices, which pushes them toward reusing the same password or choosing short, memorable phrases. That behavior makes large-scale credential leaks more damaging, because one exposed password can unlock multiple services. Even when a password is unique, it can be captured through convincing fake login pages or intercepted on compromised devices. Two-factor authentication improved the situation, yet it also introduced friction and new points of failure. SMS codes can be delayed or blocked, authenticator apps can be lost during phone changes, and push approvals can be mis-tapped when users are distracted. Support teams spend time on account recovery, and users lose confidence when they are locked out. The result is a login system that is both insecure and inconvenient, which is exactly the combination attackers benefit from. Passkeys are emerging as a practical replacement because they remove the shared secret. Instead of typing a password that can be stolen and reused, a passkey relies on cryptographic keys stored on a device and unlocked with a local method such as fingerprint, face recognition, or a device PIN. This shift changes the economics of account takeover: there is no password to phish, and the login is tied to the legitimate website or app.
Passkeys Are Replacing Passwords Fast
Passkeys Are Replacing Passwords Fast
Passwords were designed for a simpler internet, but today they are a weak link for both people and organizations. Most users still reuse the same password across multiple services, which means a single leak can unlock email, shopping accounts, and cloud storage. Even when people try to be careful, long and complex passwords are hard to remember, so they end up written in notes apps, browsers, or spreadsheets. Attackers also take advantage of automated guessing and credential-stuffing tools that test stolen logins at massive scale. On the business side, password resets create real costs: help desks spend time verifying identity, employees lose productivity, and security teams deal with account takeover investigations. Multi-factor authentication helps, but it is not always enabled, and SMS codes can be unreliable when phones change, roaming fails, or messages are delayed. The result is a daily friction point that still does not deliver consistent security.
Private 5G Networks for Modern Factories
Private 5G Networks for Modern Factories
Manufacturers are adopting private 5G because it offers predictable wireless performance inside facilities where Wi‑Fi often struggles with interference, roaming gaps, and congestion. A private 5G network is built for a specific site or campus, with dedicated radio resources, controlled device access, and service levels that can be engineered for production needs. That matters for operations such as automated guided vehicles, machine vision inspection, and real-time monitoring of equipment, where a few seconds of dropouts can disrupt workflows. Another driver is the growth of connected assets. A single plant can have thousands of sensors, handheld terminals, cameras, and mobile robots. Private 5G is designed to manage large device populations with consistent authentication and policy control. It also supports mobility across wide areas, including yards and warehouses, without relying on multiple Wi‑Fi access points and complex tuning. For many factories, the goal is not to replace every existing network, but to add a wireless layer that is easier to govern and more aligned with industrial uptime expectations.
By clicking the SUBSCRIBE button, you are agreeing to our Privacy & Cookie Policy If you want to unsubsribe the marketing email, please proceed to our privacy center.
Download The ICN App
Download on the App StoreDownload on Huawei AppGalleryGet it on Google Play
FacebookX (Twitter)InstagramYouTubeLinkedInTikTokthreadsSnapchat
Nobar Trading Investment Company (PLC)
Stock Information on the Amman Stock Exchange
Follow Us
qr
© 2005-2026 ICN. All Rights Reserved.