The Passwordless Authentication with Passkey Technology from an Implementation Perspective

Fuente: arXiv
Enregistré dans:
Détails bibliographiques
Auteurs principaux: Tran, Lien, Zhang, Boyuan, Pawanja, Ratchanon, Khokhar, Rashid Hussain
Format: Preprint
Publié: 2025
Sujets:
Accès en ligne:
Tags: Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
_version_ 1866913993716662272
author Tran, Lien
Zhang, Boyuan
Pawanja, Ratchanon
Khokhar, Rashid Hussain
author_facet Tran, Lien
Zhang, Boyuan
Pawanja, Ratchanon
Khokhar, Rashid Hussain
contents With the rise of sophisticated authentication bypass techniques, passwords are no longer considered a reliable method for securing authentication systems. In recent years, new authentication technologies have shifted from traditional password-based logins to passwordless security. Among these, Time-Based One-Time Passwords (TOTP) remain one of the most widely used mechanisms, while Passkeys are emerging as a promising alternative with growing adoption. This paper highlights the key techniques used during the implementation of the authentication system with Passkey technology. It also suggests considerations for integrating components during system development to ensure that users can securely access their accounts with minimal complexity, while still meeting the requirements of a robust authentication system that balances security, usability, and performance. Additionally, by examining TOTP and Passkey mechanisms from an implementation perspective, this work not only addresses major security concerns such as password leaks, phishing attacks, and susceptibility to brute-force attacks, but also evaluates the feasibility and effectiveness of these mechanisms in real-world implementations. This paper demonstrates the superior security of Passkey technology and its potential for broader adoption in secure authentication systems.
format Preprint
id arxiv_https___arxiv_org_abs_2508_11928
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle The Passwordless Authentication with Passkey Technology from an Implementation Perspective
Tran, Lien
Zhang, Boyuan
Pawanja, Ratchanon
Khokhar, Rashid Hussain
Cryptography and Security
With the rise of sophisticated authentication bypass techniques, passwords are no longer considered a reliable method for securing authentication systems. In recent years, new authentication technologies have shifted from traditional password-based logins to passwordless security. Among these, Time-Based One-Time Passwords (TOTP) remain one of the most widely used mechanisms, while Passkeys are emerging as a promising alternative with growing adoption. This paper highlights the key techniques used during the implementation of the authentication system with Passkey technology. It also suggests considerations for integrating components during system development to ensure that users can securely access their accounts with minimal complexity, while still meeting the requirements of a robust authentication system that balances security, usability, and performance. Additionally, by examining TOTP and Passkey mechanisms from an implementation perspective, this work not only addresses major security concerns such as password leaks, phishing attacks, and susceptibility to brute-force attacks, but also evaluates the feasibility and effectiveness of these mechanisms in real-world implementations. This paper demonstrates the superior security of Passkey technology and its potential for broader adoption in secure authentication systems.
title The Passwordless Authentication with Passkey Technology from an Implementation Perspective
topic Cryptography and Security
url https://arxiv.org/abs/2508.11928