Passkey
A passkey is a passwordless authentication method that verifies identity using biometrics, such as Face ID, Touch ID, or a fingerprint, a device PIN, a security key or QR code, instead of a password.
This functionality is built on FIDO2 and WebAuthn standards, enabling consistent and secure use across supported portals.
Availability
Passkeys are supported on OHID (One Healthcare ID) and EDA-enabled HSID portals in browser-based experiences on desktop and mobile devices, including in-app web views. Native mobile app support is not currently available.
Features
Passkeys address several long‑standing challenges with traditional authentication:
- Improved user experience: Eliminates the need for complex passwords, using biometric authentication for easy login.
- No 2FA required: Passkeys replace traditional MFA methods — no SMS codes or phone calls required.
- Improved security: Passkeys are bound to a user’s device or stored in a trusted password manager, such as iCloud Keychain or Google Password Manager. As they eliminate the use of passwords and verification codes, they significantly reduce the risk of phishing, credential stuffing, and replay attacks.
- Consistent experience across portals: Once set up, passkeys can be used across HSID and OHID portals, creating a consistent authentication experience within the Aikyam ecosystem.
- Reduced support and recovery issues: By removing passwords from the flow, passkeys reduce common support issues related to forgotten passwords, locked accounts, and repeated recovery attempts.
- Regulatory compliance: Ensures adherence to HIPAA and GDPR regulations, enhancing data security and privacy.