Glossary term
What is Passkey (WebAuthn / FIDO2)?
Passkey stands for WebAuthn / FIDO2.
Passwordless login using device cryptography. Example: Unlock with fingerprint; nothing to phish.
Learn it properly · System DesignLesson 49: Authentication vs Authorization: Sessions, Cookies & JWTEvery endpoint checked “is the user logged in?” — and changing one number in the URL showed another customer's invoice. Authentication vs authorization, storing passwords, MFA and passkeys, sessions vs JWTs (with a live token to tamper with), and RBAC, ABAC and ReBAC.