Passkeys vs. Passwordless vs. Phishing-Resistant MFA & Passkey Predictions- This Week at Passkeys
Passkeys vs. Passwordless vs. Phishing-Resistant MFA - Passkey Predictions
What a Week!
🔐 Passkeys vs. Passwordless vs. Phishing-Resistant MFA
🪟 2025 Passkey Predictions
Here are this week’s topics that you don’t wanna miss out on!
Join our Passkeys Webinar – April 16, 2025
Learn how leading B2C enterprises roll out passkeys at scale - without disrupting UX or their existing IAM.
📩 Get exclusive insights on ROI, adoption strategies & common pitfalls.
🕒 15:30 CET / 10:30 AM ET | 👤 Vincent Delitz, Managing Director @ Corbado
📍 Live on Zoom - 100+ already registered
Questions from passkey integration projects
See what others have asked about integrating passkeys:
#4 What is the purpose of the excludeCredentials field?
When you call navigator.credentials.create()
, you can populate excludeCredentials
with a list of existing credential IDs. This instructs the authenticator not to create a new credential if one of those credential IDs already exists. Essentially, excludeCredentials tells the authenticator:
“These credential IDs already belong to this user. Please do not re-register them or create duplicates.”
Passkeys vs. Passwordless vs. Phishing-Resistant MFA: What's the Difference?
Buzzwords flying around and you're not sure what’s what? This guide breaks down three of the most-hyped login terms in security right now: passkeys, passwordless and phishing-resistant MFA. You’ll learn where they overlap, how they differ and why “passwordless” doesn’t always mean secure. From SMS codes to magic links to fully phishing-proof logins, it’s all in here. Plus, real-world cases from Mercari, MyGov and SaaS startups show what’s actually working out there. Want to know which method strikes the best balance between UX, security and cost?
What to expect from passkeys in the rest of 2025
2025 is shaping up to be the year for passkeys. Windows is finally catching up with sync support, fixing one of the biggest pain points for users. At the same time, browsers are rolling out smarter autofill thanks to the WebAuthn Signal API - so fewer “which passkey was that again?” moments. Password managers start auto-converting old logins into passkeys, which means adoption takes off fast. And it’s not just consumers: banks are jumping on board and Visa and Mastercard are trialing passkeys for payments. Even phishing scams powered by AI are pushing companies to rethink security - passkeys might just be the answer. Which of these trends will actually stick?
Other passkey news
PayPal demands an “Outcome-Based Approach to Strong Customer Authentication” to make synced passkeys compliant with SCA/PSD3
Join the Passkeys Community!
Our mission is to free the world from passwords to make the Internet a safer place - this can only be accomplished together.
Join our passkeys community on Slack to connect with other passkeys enthusiasts, stay up-to-date in the passkeys world, get implementation support and show your passkeys projects!