Passkeys, this technology supposed to replace our traditional passwords, does not yet keep all its promises at the start of 2025. While Apple and other tech giants have been promoting it for two years now, the adoption remains complex for average users. Let’s take stock of this solution which was to revolutionize our online security.
A promising technology but too complex
Passkey technology, based on FIDO2 and WebAuthn specifications, is theoretically elegant. It allows passwordless authentication using unique cryptographic keys stored on our devices. The principle is attractive: no need to remember complex passwords, you just need to use your fingerprint or facial recognition to log in.
However, as Dan Goodin ofArs Technicathe multiplicity of implementations poses a problem. Each ecosystem (Apple, Google, Microsoft) tries to impose its own vision, creating a fragmented and sometimes confusing experience for the user. For example, logging into PayPal with a passkey on Windows will be different from the experience on iOS or Android. Some browsers like Firefox are not even supported by certain sites.
Limitations that slow down adoption
Passkeys currently suffer from several major limitations. Firstly, no major site yet allows you to completely do without the traditional password. This remains mandatory as a last resort, which partly cancels out the promised security benefits.
Synchronization between devices is also problematic. As Son Nguyen Kim of Proton Pass notes:
If you use Google Chrome on Mac, passkeys are stored in Apple Keychain, preventing them from syncing with Chrome on other devices.
A solution exists through third-party password managers like 1Password, but this adds additional complexity.
What approach should we adopt today?
Until the technology matures, experts recommend a pragmatic approach. For Apple users who remain in the ecosystem (iPhone + Mac for example), passkeys can already offer an interesting alternative to traditional passwords thanks to the native integration with iCloud Keychain and the Passwords application. ‘Apple.
For others, the best solution is to use a strong password manager (like 1Password or Bitwarden) combined with two-factor authentication via an authenticator app (like Authy) or a physical security key. (YubiKey). This approach, although less “modern” than passkeys, today offers the best compromise between security and ease of use.
Passkey technology remains promising for the future, but widespread adoption will still require time and significant improvements in interoperability and user experience. Apple and other players will have to work together to create a more unified experience that is accessible to everyone.