Passkeys can be synced using external providers, and you can create groups to share passwords and passkeys. In managed environments, passkeys support Managed AppleIDs, including syncing via iCloudKeychain, and access controls let people easily restrict how passkeys are shared andsynced.
What’s new
What’s newPasskeys are a replacement for passwords that are more secure, easier to use, and can’t be phished. They offer faster sign-in, fewer password resets, and reduced support costs. Use the new automatic passkey upgrade API to create a passkey when someone signs in to your app and let them know that the passkey was saved — all without interrupting theirflow.
Streamlined sign-in, withoutpasswords
Saving and using a passkey is quick and easy with one-step account creation and sign-in using FaceID or TouchID. There’s no need to create or manage passwords. Because passkeys are synced with iCloudKeychain, they’re available across Apple devices. You can even use your iPhone to sign in to apps and websites on non-Appledevices.
Next-generation accountsecurity
Based on FIDO Alliance and W3C standards, passkeys replace passwords with cryptographic key pairs. These key pairs profoundly improve security.
Strong credentials. Every passkey is strong. They’re never guessable, reused, or weak.
Safe from server leaks. Because servers only keep public keys, servers are less valuable targets for hackers.
Safe from phishing. Passkeys are intrinsically linked with the app or website they were created for, so people can never be tricked into using their passkey to sign in to a fraudulent app or website.
In iCloudKeychain, passkeys are end-to-end encrypted, so even Apple can’t read them. A passkey ensures a strong, private relationship between a person and your app or website.
Works alongside passwords
Since signing in with passkeys uses AutoFill and FaceID or TouchID for biometric verification, the transition to passkeys is seamless. This lets people use passkeys alongside passwords, so you don’t need to adjust your sign-in page based on credential type. You’ll use the new Authentication Services API to add passkeys, creating sign-in flows that are familiar to users.
