What are passkeys?
Passwords have been with us for decades - and are also a constant source of irritation. They are forgotten, written down, chosen too simply or used multiple times. This not only leads to frustration among employees, but also to real security risks. This is exactly where Passkeys come in: a modern login method based on biometric data or security tokens - and makes the classic password superfluous.
Passkeys use, for example, fingerprints, facial recognition or a physical device such as a USB security key to confirm the user's identity. Access is immediate, without having to type anything in - secure, convenient and fast.
This is particularly practical in day-to-day business: the notebook is unlocked with a finger in the home office, the CRM tool in the office recognizes the face - and a small security token is all that is needed to log into the cloud system. The technology works on all common platforms: Windows, macOS, iOS, Android - and is already supported by many well-known services such as Microsoft, Google and Apple.
The biggest difference to passwords is that passkeys cannot be guessed, leaked or stolen via phishing. The data remains on the device and the login only works with physical access - an enormous security gain.
SAVE TIME
No more password stress
In everyday life, logging in with a fingerprint or facial recognition saves a lot of time - and nerves. Especially when changing workstations, hybrid meetings or on the go with a notebook, it becomes clear that if you can't log in, you lose valuable minutes. Passkeys make access seamless.
GAIN SECURITY
Increased security
Weak passwords, repeatedly used access data or insecure notes are a thing of the past. Passkeys make it much more difficult for attackers to gain access - and increase security in the company without overburdening users.
SIMPLY MANAGE
Reduced IT workload
No password resets, no forgotten logins, fewer tickets. IT departments benefit from a more stable infrastructure, less support effort and simpler onboarding processes - especially if several tools are connected via central authentication.
The solution is with CANCOM.
Whether a business laptop with fingerprint scanner, webcam with facial recognition or certified USB security key: In our online store, you will find a selection of devices that immediately support passkeys. This creates the basis for secure, password-free workplaces in your company.
Discover the latest devices with passkey support
How do passkeys work?
While traditional passwords consist of strings of characters that have to be created by the user and entered manually each time they log in, a passkey works completely differently - and much more elegantly. Technically speaking, it is an asymmetric key pair: a private and a public key.
The private key is stored securely on the respective device - for example, the company laptop or smartphone. It never leaves the device. The public key, on the other hand, is transmitted to the service provider when the passkey is created, for example a web application or a cloud login.
During the login process, the service sends a request: Is the user who is trying to log in actually authorized? The device responds by using the private key to create a cryptographic signature, which the service checks with the public key. Access is only granted if everything matches. A password is not transmitted - and therefore cannot be intercepted or guessed.
The login itself is convenient: either by fingerprint scanner, facial recognition, device PIN or with a FIDO2-compatible USB security key. The underlying technology is based on open standards such as FIDO2 and WebAuthn, which means that many operating systems and browsers are already compatible.
The private key is stored securely on the respective device - for example, the company laptop or smartphone.
The result: less effort, greater security - and a modern user experience that meets the requirements of contemporary corporate IT.
Passkeys work best with a proper identity platform.
Microsoft Entra ID lets you roll out passwordless login across your entire organisation – centrally managed, GDPR-compliant, scalable from 5 to 5,000 users.