WhatsApp adopts passkeys and takes a step towards a passwordless future
WhatsApp has decided to take an important step towards the passwordless future by announcing today the adoption of passkeys (or access keys in good Portuguese). In practice, users will no longer need to enter an alphanumeric password when authenticating on the platform, controlled by Mark Zuckerberg’s Meta.
The launch takes place first on Android phones and a timeline has not been released for it to arrive on iPhone. Fans of the messenger will have it easier and safer, according to the company.
Change in login flow
We have listed below the approximate flow of WhatsApp login on a new smartphone:
How it is: enter the phone number; enter the password; enter a code that arrives via SMS; Confirm on the old device that you want to make the change.
How it looks: enter the phone number; Authenticates to the old device.
In other words, the user no longer needs to memorize the login/password because the access key is already stored on the old device. Authentication is done through biometrics (fingerprint or face), PIN or geometric pattern.
One of the advantages of passkeys will be the end of authentication with codes that arrive via SMS, which can lead to a nice headache if the phone line has gone through the SIM swap scam. WhatsApp says that the consumer is safer with the access keys.
Passwords still exist
According to Android Police, users will still be able to use passwords if they wish. This can be particularly important if the old device has been stolen, which would prevent authentication on it to allow access to a new device.
The cryptographic key is automatically stored in Google’s password manager.
WhatsApp also did not reveal the timeline for the release of the new feature. Most likely, it will occur in waves, in a staggered manner.
It is worth remembering that several companies are adhering to passkeys. The technology behind this tool was developed by an alliance and is backed by the W3C, an organization that standardizes web protocols.
Last week, Google announced that it would ask for passkeys from new users who sign up for the company’s platforms.
