App Logo

Download Our App

Shop your way

logologo
Image
Technology
Artificial intelligence
Technology & Tools
Programming & Developments
Technical Articles
Gaming
Mobile

Passkeys in Everyday Apps

03/03/2026By: ICN Writer
Passkeys in Everyday Apps

Why passkeys are replacing passwords

Passkeys are a newer way to sign in that aims to remove the weakest link in most accounts: the reusable password. Instead of typing a secret string that can be guessed, stolen, or reused across sites, a passkey relies on a cryptographic key pair created for a specific service. The private key stays on your device, while the service stores only a public key. When you sign in, your device proves it holds the private key, typically after you confirm with a fingerprint, face scan, or device PIN. This shift matters because most account takeovers start with password reuse, phishing pages that capture logins, or leaked password databases. Passkeys reduce these risks by making the credential unique per service and by removing the incentive to type it into a fake site. For readers, the practical question is not whether passkeys are “the future,” but how they change daily workflows in banking, shopping, workplace tools, and social apps, and what new habits are required to use them safely.

How passkeys work without the math

At a high level, a passkey is a sign-in credential tied to a specific app or website and protected by your device’s local unlock method. When you create one, your phone or computer generates two related keys. The public key is sent to the service and saved with your account. The private key never leaves your device in normal use. During login, the service sends a challenge, and your device signs it with the private key after you approve the action. The service verifies the signature using the public key it already has. This design means there is no shared secret to steal from the service’s database, and there is nothing meaningful for a phishing site to capture because your device will only sign a challenge for the legitimate domain or app. In practice, you will see this as a prompt like “Use passkey” followed by Face ID, fingerprint, or a device PIN. Many platforms also sync passkeys across your devices through a secure cloud keychain, which is convenient but introduces questions about recovery and cross-platform use that people should plan for.

Where you will notice the biggest changes

The first noticeable change is speed. In apps that support passkeys well, sign-in becomes a two-step flow: choose the account, then confirm on-device. That can be faster than typing a long password and waiting for a one-time code. The second change is fewer “reset password” loops. Because the credential is managed by the device, many users stop relying on memory and stop keeping lists of passwords. The third change is in multi-device life. If you use a phone, a laptop, and a tablet, you will care about whether passkeys sync automatically, whether they can be used on a new device, and how they behave when you switch ecosystems. Some services allow cross-device sign-in by showing a QR code on the computer and approving on the phone, which is useful in workplaces and shared environments. You will also notice differences in customer support: some companies still treat passkeys as an optional add-on, while others are moving to “passkey-first” experiences where passwords become a fallback. Understanding which model your key services use—email, cloud storage, finance apps, and work accounts—helps you avoid surprises during travel, device upgrades, or urgent account recovery.

Setup checklist for a smooth rollout

A practical rollout starts with your most important accounts, especially email and cloud storage, because they often control access to other services. First, update your operating system and browsers so passkey support is current. Then enable a strong device lock: a long PIN or passcode is better than a short one, and biometric unlock should be backed by a secure code. Next, create passkeys in services that offer them and keep at least one recovery method active, such as a backup email, a recovery phone number, or printed recovery codes stored securely. If your platform syncs passkeys, confirm that cloud keychain sync is enabled and protected with strong account security, including multi-factor authentication for the cloud account itself. For people who use both personal and work devices, separate where possible: keep work passkeys in managed profiles if your employer provides them, and avoid mixing credentials across shared devices. Finally, test the experience before you need it. Sign out and sign back in on a second device, try the QR-based flow, and verify you can still access the account if biometrics fail and you must use the device PIN. Treat this as a short drill, not a one-time toggle.

Common pitfalls and how to avoid them

The most common pitfall is assuming passkeys eliminate all account risk. They reduce phishing and password reuse, but they do not protect you if someone gains control of your unlocked device or your cloud account that syncs credentials. That is why device security and cloud account security matter more than ever. Another pitfall is poor recovery planning. If you lose your phone and your passkeys were not synced, you may face a longer recovery process, especially with services that are strict about identity verification. Even with sync, switching between ecosystems can be confusing: a passkey saved in one platform’s keychain may not automatically appear on another. People also get tripped up by shared computers. On a public or family computer, avoid creating a passkey that stays on that machine unless you fully trust it and it is protected. Use cross-device sign-in instead, where the credential remains on your phone. Finally, watch for inconsistent UI. Some apps label the feature differently or hide it under security settings. If you are rolling this out for a small business or a family, document which accounts have passkeys enabled, which devices hold them, and what the recovery steps are. Clear inventory prevents last-minute confusion during a device upgrade or when an account is locked.

bookmark

If you want a simple way to track progress, use this bookmark section as a quick reference for your next 30 days. Week 1: enable passkeys for your primary email account and confirm you have at least two recovery options. Week 2: add passkeys to your most-used shopping and delivery apps, then test sign-in on a second device. Week 3: review your cloud keychain settings, confirm multi-factor authentication is enabled for the cloud account, and remove old devices you no longer use. Week 4: expand to workplace tools if allowed, and document which accounts are passkey-enabled along with the recovery steps. The goal is not to convert every account immediately, but to prioritize the services that would cause the most disruption if you lost access. By treating passkeys as part of routine digital maintenance—like updating software and reviewing privacy settings—you can get the convenience benefits without creating new gaps in recovery or device security.

* All articles published on this blog are sourced from various websites and are provided for informational purposes only. They should not be considered as confirmed studies or accurate information. Please verify the information independently before relying on it.

Similar ARTICLES

Digital Parenting Starts at Home
Digital Parenting Starts at Home
Digital parenting is the day-to-day guidance that helps children use phones, tablets, games, and online services safely and productively. It is not limited to blocking content or setting a time limit. It includes teaching children how to judge information, protect their privacy, manage attention, and behave respectfully in digital spaces. A child who knows how to pause before sharing a photo, ask permission before posting someone else’s image, and recognize a suspicious message is practicing digital skills that matter beyond any single app. For mothers, digital parenting also means understanding how technology shapes routines at home. Notifications can interrupt homework, short videos can replace sleep, and group chats can create social pressure. The goal is not to eliminate screens, but to make technology serve the family’s priorities. That requires clear expectations, consistent follow-up, and a home environment where children can ask questions without fear of punishment. When children hide their online life, risks increase; when they can talk openly, mothers can intervene early and calmly.
Facebook Expands Free Verification Worldwide
Facebook Expands Free Verification Worldwide
Facebook’s move to offer free verification to users worldwide signals a shift in how the platform wants identity and trust to work at scale. For years, verification badges were associated with public figures, brands, and accounts that Facebook considered “notable.” A broader, no-fee option changes the practical meaning of the badge from a status marker into a safety and clarity tool that can apply to everyday users. In operational terms, a free verification program typically aims to reduce impersonation, improve the reliability of search results, and help people quickly confirm they are interacting with the intended account. When verification becomes more accessible, the platform can standardize identity checks across regions rather than relying on ad hoc decisions or media-based notability. That matters in markets where local creators, small businesses, educators, and community organizers may be widely known within a city or niche but not covered by major publications. The global aspect is also important. Facebook’s user base spans countries with different documentation systems, naming conventions, and privacy expectations. A worldwide rollout suggests the company believes it can manage these differences with a consistent process, while still adapting to local requirements. For users, the headline is simple: the badge may become easier to obtain, but the real change is how it could influence account security, visibility, and the credibility of interactions on the platform.
Digital Skills Employers Actually Hire For
Digital Skills Employers Actually Hire For
Digital skills are no longer limited to “knowing software.” Employers now look for people who can improve speed, accuracy, and decision-making across everyday workflows. In many roles, the strongest signal is not the number of tools you list, but whether you can connect data, automate repetitive steps, and communicate results clearly. Hiring teams increasingly evaluate candidates through practical tasks: cleaning a dataset, building a dashboard, writing a short automation script, or drafting a measurement plan for a marketing campaign. Even non-technical departments use digital assessments, because most work now touches cloud platforms, shared documents, and analytics. Another shift is that job descriptions often bundle skills. A single role may require basic data analysis, collaboration in cloud tools, and awareness of security practices. This means candidates who can demonstrate “end-to-end” capability—collect, process, analyze, and present—stand out faster than those who only know one isolated tool.
When Kids Use Video Games Wisely
When Kids Use Video Games Wisely
Many parents ask whether video games can offer real benefits, or if they are only a distraction. The most accurate answer is that outcomes depend on the type of game, the child’s age, and how play is managed at home. Games are not a single category: a cooperative puzzle game, a creative building game, and a fast competitive shooter do not train the same skills or habits. The same child can also react differently depending on sleep, school workload, and temperament. A practical way to think about benefits is to focus on measurable areas: attention control, problem-solving, language exposure, social cooperation, and motivation. Benefits are more likely when games are age-appropriate, time-limited, and combined with offline routines like reading, sports, and family time. In other words, games can be one tool in a broader learning environment, not a replacement for it. This article focuses on potential advantages of electronic games for children, and how parents can increase the chance of positive outcomes through selection and daily rules. It also highlights warning signs that suggest a need to adjust the plan, such as sleep disruption, declining grades, or frequent conflict over screen time.
WhatsApp Usernames and Number Privacy
WhatsApp Usernames and Number Privacy
WhatsApp’s official rollout of usernames introduces a new way to connect without automatically exposing your phone number. Until now, the app’s identity model was tied to a number, which meant that joining a group, starting a chat from a link, or messaging someone new often revealed your digits by default. With usernames, WhatsApp adds a public-facing handle that can be shared instead of a number, making it easier to keep personal contact details private in everyday situations. The feature is designed for common scenarios: joining community groups, coordinating with customers or classmates, or responding to a message request without handing out your number. In practice, a username becomes the primary “shareable” identity, while the phone number remains the account anchor behind the scenes for registration, security, and recovery. This separation is especially useful for people who use WhatsApp widely but prefer to limit how broadly their number circulates. It is important to set expectations. A username does not turn WhatsApp into an anonymous service, and it does not remove the need for a phone number to create an account. It also does not automatically hide your number from everyone in every context. Privacy depends on how you configure visibility settings, how you start conversations, and whether the other person already has your number saved. The benefit is that you gain a practical option to share a handle first, and reveal your number only when you choose.
WhatsApp Beta Adds the Green Dot
WhatsApp Beta Adds the Green Dot
WhatsApp’s beta channel has begun showing a small green dot in parts of the interface, signaling a new layer of status visibility inside the app. The indicator is designed to be quick to notice without interrupting the chat experience, and it appears as a compact dot rather than a banner or pop-up. In practical terms, it functions as a visual cue tied to activity or availability signals that WhatsApp already manages in the background. The green dot is not a standalone feature by itself; it is an interface element that helps users interpret what is happening at a glance. WhatsApp has long offered last seen, online status, and read receipts, but those signals are distributed across different screens and depend on privacy settings. The new dot aims to reduce the need to open a profile or wait for a text update by placing a minimal indicator where users naturally look while navigating chats. Because this is appearing in the experimental build, the exact behavior can vary between testers. Some users may see it only in specific areas such as the chat list or within a conversation header, while others may not see it at all yet. That variability is typical for beta rollouts, where features are enabled server-side in waves to measure performance and user understanding before a wider release.
UK Under-16 Social Media Ban Explained
UK Under-16 Social Media Ban Explained
Britain is moving toward restricting access to social media for anyone under 16, framing the measure as a child-safety and online-harms intervention rather than a general internet ban. In practical terms, the policy discussion focuses on preventing under-16s from holding accounts on mainstream social platforms and limiting the ability of platforms to recommend content, connect strangers, or deliver targeted features to minors. The details that matter are operational: which services count as “social media,” whether messaging apps are included, and how platforms must verify age. Most proposals in this space distinguish between open social networks that rely on feeds, recommendations, and public sharing, and services that are primarily private communications. The UK’s approach is expected to lean on existing online-safety obligations, using enforcement tools that already exist for platforms that fail to protect children. A key point is that the policy is not only about blocking access. It is also about shifting responsibility to companies to design safer defaults, reduce exposure to harmful content, and prove compliance. That means the ban discussion is tightly linked to age assurance, content moderation standards, and the design of recommendation systems.
WhatsApp Tightens Message Copy and Capture
WhatsApp Tightens Message Copy and Capture
WhatsApp is reinforcing privacy by limiting two everyday actions that often lead to unintended sharing: copying messages and capturing them as screenshots or screen recordings. While the app has long relied on end-to-end encryption to protect content in transit, encryption does not stop a recipient from duplicating what they can already see. The new direction targets that gap by reducing the ease of turning private chats into shareable snippets. The practical impact is most visible in sensitive conversations: personal identifiers, one-time codes, addresses, medical details, and private work discussions. In many cases, the harm does not come from hacking but from casual forwarding, copying into another app, or saving a screenshot “just in case.” By adding friction to these actions, WhatsApp is signaling that privacy is not only about secure delivery, but also about limiting downstream exposure. These changes also reflect broader user expectations. People increasingly treat messaging apps as a place for semi-formal communication—receipts, confirmations, customer support, and workplace coordination. When conversations carry higher stakes, users want clearer boundaries around what can be extracted and stored. WhatsApp’s move aligns with that shift by making it harder to convert chat content into permanent, easily redistributed files. Importantly, such restrictions are rarely absolute. They may apply to specific chat types, certain media formats, or accounts with enhanced privacy settings. Users should expect a phased rollout, with differences by device, operating system, and app version. The headline is simple—less copying and capturing—but the real story is how these controls fit into WhatsApp’s broader privacy toolkit.
Mobile Apps Worth Trying This Year
Mobile Apps Worth Trying This Year
Before downloading anything, define the job you want the app to do: manage tasks, edit photos, learn a skill, or reduce screen time. Check the update history and release notes; apps that ship improvements every few weeks tend to fix bugs faster and keep up with new phone features. Read recent reviews, not only the overall rating, and look for patterns such as battery drain, login problems, or aggressive ads. Privacy and cost matter as much as features. Review permissions and avoid apps that request access unrelated to their purpose, such as a flashlight asking for contacts. Prefer services with clear data controls, export options, and two-factor authentication. For paid plans, compare what is included: cloud storage limits, collaboration features, offline access, and customer support. A good rule is to test the free tier for a week, then decide whether the subscription saves time or replaces another tool you already pay for.
Passkeys Are Replacing Passwords
Passkeys Are Replacing Passwords
Passwords are still the default gatekeeper for most apps and websites, but they are showing their age. People reuse the same password across services because remembering dozens of strong, unique strings is unrealistic. That habit turns a single data breach into a chain reaction: once one account is exposed, attackers try the same credentials elsewhere. Even when users pick unique passwords, phishing pages can capture them in seconds, and many victims cannot tell a convincing fake login screen from a real one. Organizations try to compensate with complexity rules and frequent resets, yet those measures often backfire. Forced rotations encourage predictable patterns, and complexity requirements push users toward writing passwords down or storing them insecurely. Multi-factor authentication helps, but SMS codes can be intercepted and app-based codes still rely on the user recognizing a legitimate login prompt. The result is a system that is expensive to support, frustrating to use, and still vulnerable to common attacks.
Passkeys in Practice for Everyday Security
Passkeys in Practice for Everyday Security
Passwords are still the default login method for most services, but they are increasingly mismatched with how people actually use the internet. Many users manage dozens of accounts across phones, laptops, smart TVs, and work devices, which pushes them toward reusing the same password or choosing short, memorable phrases. That behavior makes large-scale credential leaks more damaging, because one exposed password can unlock multiple services. Even when a password is unique, it can be captured through convincing fake login pages or intercepted on compromised devices. Two-factor authentication improved the situation, yet it also introduced friction and new points of failure. SMS codes can be delayed or blocked, authenticator apps can be lost during phone changes, and push approvals can be mis-tapped when users are distracted. Support teams spend time on account recovery, and users lose confidence when they are locked out. The result is a login system that is both insecure and inconvenient, which is exactly the combination attackers benefit from. Passkeys are emerging as a practical replacement because they remove the shared secret. Instead of typing a password that can be stolen and reused, a passkey relies on cryptographic keys stored on a device and unlocked with a local method such as fingerprint, face recognition, or a device PIN. This shift changes the economics of account takeover: there is no password to phish, and the login is tied to the legitimate website or app.
Private 5G Networks for Modern Factories
Private 5G Networks for Modern Factories
Manufacturers are adopting private 5G because it offers predictable wireless performance inside facilities where Wi‑Fi often struggles with interference, roaming gaps, and congestion. A private 5G network is built for a specific site or campus, with dedicated radio resources, controlled device access, and service levels that can be engineered for production needs. That matters for operations such as automated guided vehicles, machine vision inspection, and real-time monitoring of equipment, where a few seconds of dropouts can disrupt workflows. Another driver is the growth of connected assets. A single plant can have thousands of sensors, handheld terminals, cameras, and mobile robots. Private 5G is designed to manage large device populations with consistent authentication and policy control. It also supports mobility across wide areas, including yards and warehouses, without relying on multiple Wi‑Fi access points and complex tuning. For many factories, the goal is not to replace every existing network, but to add a wireless layer that is easier to govern and more aligned with industrial uptime expectations.
Home Internet Benefits and Quiet Risks
Home Internet Benefits and Quiet Risks
Home internet is no longer a luxury; it is the backbone of how many families learn, work, shop, and stay connected. A single connection now supports video calls, school platforms, smart TVs, online banking, and home devices that rely on constant access. This convenience is especially visible in households where schedules are tight: paying bills in minutes, booking appointments without travel, and accessing public services through official portals. At the same time, the internet’s presence in every room changes routines in subtle ways. Screen time can expand without clear boundaries, and the line between “useful” and “habitual” browsing becomes thin. Because the connection is always available, risks do not announce themselves loudly; they often appear as small compromises in privacy, attention, and family time. Understanding both sides starts with recognizing that the home network is an environment that needs management, not just a utility that runs in the background.
By clicking the SUBSCRIBE button, you are agreeing to our Privacy & Cookie Policy If you want to unsubsribe the marketing email, please proceed to our privacy center.
Download The ICN App
Download on the App StoreDownload on Huawei AppGalleryGet it on Google Play
FacebookX (Twitter)InstagramYouTubeLinkedInTikTokthreadsSnapchat
Nobar Trading Investment Company (PLC)
Stock Information on the Amman Stock Exchange
Follow Us
qr
© 2005-2026 ICN. All Rights Reserved.