Web Security · Junior · Question 62 of 75

What is a passkey?

1A code sent by SMS
2A long password generated and stored by the browser
✓Correct answer: A login credential based on a key pair stored on the device, where the private key never leaves it

Explanation

Passkeys use WebAuthn. The site keeps only the public key, and the signature is bound to the site's domain, which makes them resistant to phishing.

Further reading

Test yourself

Take the Web Security · Junior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.