Password manager company LastPass has unveiled support for passkey security, offering secure access to multiple devices, browsers and operating systems.
Don MacLennan, chief product officer at LastPass, said they’d built support to store passkeys across platforms.
“Passkeys are changing how people log in, using a much more secure method,” he said in the announcement. “It’s a smarter, simpler way to stay secure.”
An alternative to passwords and their management, passkeys can now be created, stored and managed in the LastPass vault.
Because passkeys can be stored alongside passwords, users will still be able to create and manage passwords with LastPass.
So what are passkeys?
Popular platforms such as Google Workspace and Microsoft already support passkey access.
Passkeys are cryptographic key pairs that can be used instead of passwords. Often, they’re stored in browser extensions.
Similarly, the LastPass public key is stored in the app or website while the private key is encrypted and stored in the user’s LastPass vault.
“Passwords and passkeys stay encrypted in the vault, not on third-party servers,” according to LastPass.
“IT teams can benefit from easier user adoption, reduced helpdesk workload, and faster, better security hygiene.”
Also, passkeys can’t be reused. Therefore they’re resistant to server-side or credential breaches.
In addition, LastPass password manager has FIDO2 certification for its server infrastructure.
“Passkey support builds on that foundation, joining other recent LastPass innovations like SaaS Monitoring and SaaS Protect,” the company said.
About passkey security
Software developer website GitHub explains passkeys versus passwords here.
“Instead of the user creating and remembering a password, passkeys are system-generated for every account,” they say.
“The user authenticates through their device’s unlock mechanisms, such as biometric features. The method relies on who the user is, rather than what they know.”
A disadvantage is that passkeys are often bound to specific devices, although new capabilities are emerging including the ability to sync across different ones.
( Photo by Wolfgang Vrede on Unsplash )
