Passkeys: Microsoft’s solution to 7,000 password attacks per second

Microsoft is ushering in a new era of authentication with passkeys—a modern, secure, and convenient alternative to traditional passwords.

According to statistics, Microsoft blocks up to 7,000 password attacks per second, double the rate from the previous year, while adversary-in-the-middle phishing attacks have surged by 146%. Passkeys offer a robust phishing-resistant solution by leveraging biometric authentication (such as facial recognition or fingerprints) or secure PINs, eliminating the vulnerabilities of traditional passwords. Compared to conventional passwords, passkeys are three times faster and eight times faster than passwords paired with multi-factor authentication (MFA).

Since May 2024, Microsoft has rolled out passkeys across services like Xbox, Microsoft 365, and Copilot, providing users with the option to create passkeys during sign-in or password reset processes.

Microsoft’s ultimate goal is to completely eliminate passwords, paving the way for a future that relies solely on phishing-resistant credentials such as Windows Hello and FIDO-compliant devices. With passkeys, hundreds of millions of users will benefit from enhanced protection against cyberattacks while enjoying a faster and more secure login experience.

Source: Security Online