Episode Overview:

In this episode, I had the pleasure of sitting down with Dr. Lillian Hartfield to discuss the transformative approach to authentication: Passkeys. We delved deep into what passkeys are, how they differ from traditional passwords, and the reasons behind their rising popularity.

Key Discussion Points:

1. Introduction to Passkeys
2. Dr. Hartfield provided a comprehensive overview of passkeys and their advantages over traditional passwords.
3. The Problem with Current Password Systems
4. We discussed the challenges users face with complex passwords and the security risks associated with password reuse.
5. Enhanced Security with Passkeys
6. Dr. Hartfield shed light on how passkeys leverage public-key cryptography to offer a more secure authentication method.
7. The Process of Creating and Using Passkeys
8. We walked through the user-friendly process of setting up and using passkeys for online authentication.
9. Device and Platform Support for Passkeys
10. Dr. Hartfield highlighted the widespread adoption of passkeys across various devices and platforms.
11. Password Managers and Passkeys
12. We touched upon the integration of passkeys in password managers, with a special mention of 1Password.
13. The Future of Passkeys
14. Dr. Hartfield shared her insights on the potential of passkeys to replace traditional passwords in the near future.

Episode Highlights:

• "Passkeys offer a more secure and user-friendly alternative to passwords." - Dr. Lillian Hartfield
• "Password managers like 1Password are evolving to support passkeys, ensuring users have a centralized, secure location for authentication." - Dr. Lillian Hartfield

---

I do hope you enjoyed this episode of the podcast. Here's some helpful resources including any sites that were mentioned in this episode.

--

Sites Mentioned in this Episode

• What are passkeys? Everything you need to know about the death of passwords

--

Find subscriber links on my site, add to your podcast player, or listen on the web players on my site:

Listen to Byte Sized Security

--

Support this Podcast with a Tip:

Support Byte Sized Security

Marc: 00:00:00

Hello listeners, and welcome back to Byte Sized Security.

2

: 00:00:03

Today, we're diving into a topic

that's reshaping the landscape

3

: 00:00:06

of online security: Passkeys.

4

: 00:00:08

With us is Dr.

5

: 00:00:09

Lillian Hartfield, Chief of Cybersecurity

Innovations at SecureTech Solutions.

6

: 00:00:14

Dr.

7

: 00:00:14

Hartfield, welcome to the show.

8

: 00:00:16

Nancy: Thank you Marc.

9

: 00:00:17

It's a pleasure to be here and

discuss this transformative

10

: 00:00:19

approach to authentication.

11

: 00:00:21

Marc: Let's start at the beginning.

12

: 00:00:22

What exactly are passkeys, and how do

they differ from traditional passwords?

13

: 00:00:26

Nancy: Great question Marc.

14

: 00:00:27

Passkeys are a new type of login

credential that allows users

15

: 00:00:30

to access sites and services

without entering a password.

16

: 00:00:33

They're built on the WebAuthentication or

WebAuthn standard, which uses public-key

17

: 00:00:37

cryptography to enhance account security.

18

: 00:00:40

The beauty of passkeys is that

there's nothing to remember, and

19

: 00:00:42

they're stored in an encrypted

format on your devices, making them

20

: 00:00:45

more secure against data breaches.

21

: 00:00:47

Marc: That sounds promising.

22

: 00:00:48

But why are we moving towards passkeys?

23

: 00:00:50

What's the problem with our

current password system?

24

: 00:00:53

Nancy: The first digital password

was invented back in: 1961

25

: 00:00:56

since then, passwords have become an

integral part of our digital lives.

26

: 00:01:00

However, as they've become more

complex, people struggle to remember

27

: 00:01:03

them, leading to password reuse

and the use of simple passwords.

28

: 00:01:06

This poses significant security risks.

29

: 00:01:09

Passkeys aim to address these

challenges by offering a more secure

30

: 00:01:12

and user-friendly alternative.

31

: 00:01:14

Marc: So, how do passkeys enhance security

compared to traditional passwords?

32

: 00:01:18

Nancy: Passkeys leverage

public-key cryptography.

33

: 00:01:20

When you use a passkey, you have

both a private and a public key.

34

: 00:01:23

The public key is stored on a

company's servers, while the private

35

: 00:01:26

key remains on your device, making it

challenging for cybercriminals to steal.

36

: 00:01:30

Unlike passwords, which can be

phished, passkeys can't be easily

37

: 00:01:33

compromised in phishing attacks.

38

: 00:01:35

Marc: That's reassuring.

39

: 00:01:36

Can you walk us through the process

of creating and using passkeys?

40

: 00:01:39

Nancy: Certainly.

41

: 00:01:40

When you visit a website that

supports passkeys, you can

42

: 00:01:42

create an account secured by a

passkey instead of a password.

43

: 00:01:45

During the setup, the site will ask

you to confirm your authenticator,

44

: 00:01:48

which could be your smartphone or a

password manager that supports passkeys.

45

: 00:01:52

The authenticator generates

related public and private keys.

46

: 00:01:55

When logging in, the site's server

sends a challenge to the authenticator,

47

: 00:01:59

which your private key solves, allowing

for a secure and swift login process.

48

: 00:02:03

Marc: What devices currently

support passkeys, and how

49

: 00:02:05

widespread is their adoption?

50

: 00:02:07

Nancy: Passkeys are compatible

with many modern devices.

51

: 00:02:10

Tech giants like Microsoft,

Google, and Apple have worked

52

: 00:02:13

collaboratively to develop them.

53

: 00:02:14

Apple's iOS 16 introduced

passkeys, utilizing Touch ID

54

: 00:02:18

and Face ID for authentication.

55

: 00:02:20

Android devices store passkeys

using the Google Password Manager.

56

: 00:02:23

As for web browsers, Chrome,

Edge, Safari, and Firefox all

57

: 00:02:27

currently support passkeys.

58

: 00:02:28

Major brands like eBay, PayPal,

Best Buy, and Nvidia have

59

: 00:02:32

also embraced this technology.

60

: 00:02:33

Marc: That's quite a range of support.

61

: 00:02:35

But what about password managers?

62

: 00:02:37

Do any of them support passkeys?

63

: 00:02:39

Nancy: Absolutely Marc.

64

: 00:02:40

Password managers are evolving

alongside this shift towards passkeys.

65

: 00:02:44

One notable example is 1Password,

which allows users to store

66

: 00:02:47

passkeys within the manager itself.

67

: 00:02:49

This offers an alternative to

storing passkeys in a device's

68

: 00:02:51

keychain or other storage.

69

: 00:02:53

By integrating passkeys, password

managers are further enhancing their

70

: 00:02:57

value proposition, ensuring users

have a centralized, secure location

71

: 00:03:01

for all their authentication needs.

72

: 00:03:02

Marc: What happens if someone

upgrades their smartphone?

73

: 00:03:05

How are passkeys transferred?

74

: 00:03:07

Nancy: When you upgrade, passkeys can be

seamlessly transferred to the new device.

75

: 00:03:10

On Android, encryption keys

are securely transferred during

76

: 00:03:13

the setup of a new phone.

77

: 00:03:14

For Apple users, passkeys are stored in

the iCloud Keychain, ensuring a smooth

78

: 00:03:18

transition when switching devices.

79

: 00:03:20

Marc: Lastly, do you foresee

passkeys replacing passwords

80

: 00:03:23

entirely in the future?

81

: 00:03:25

Nancy: While passwords have been around

for a long time, the push for passkeys

82

: 00:03:28

from industry leaders suggests a

shift towards this more secure method.

83

: 00:03:31

It might take time, but with the

advantages passkeys offer, we could

84

: 00:03:34

see a significant reduction in password

reliance over the next few years.

85

: 00:03:38

Marc: Dr.

86

: 00:03:39

Hartfield, thank you for shedding

light on this fascinating topic.

87

: 00:03:42

It's been a pleasure

having you on the show.

88

: 00:03:44

Nancy: Thank you Marc.

89

: 00:03:45

It's essential for everyone to stay

informed about the evolving landscape

90

: 00:03:48

of cybersecurity, and I'm glad to

have been a part of this discussion.

91

: 00:03:51

Marc: And to our listeners, thank you

for joining us on Byte Sized Security.

92

: 00:03:55

Stay safe, stay informed, and we'll

catch you in the next episode.

93

: 00:03:59

Please share this podcast if you find it

valuable by telling people to visit byte

94

: 00:04:03

sized security dot show and subscribe.

95

: 00:04:06

And give a review on whatever

platform you listen to this podcast.

96

: 00:04:09

It would be most appreciated.