Bitwarden now lets you create passkeys for your business apps
Bitwarden and passwordless.dev merger comes to fruition
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
Bitwarden- in our view thebest free password manageraround - has announced Bitwarden Passwordless.dev, a toolkit to allow developers to integrate passkeys into consumer websites and enterprise applications.
Passkeys allow for completely passwordless logins, where, rather than the user having to come up with a custom string to secure their account - perhaps with the help of thebest password generator- a cryptographic key is automatically generated on device (if it supports them) that no one has any knowledge of - not even the user.
For this reason, they are thought to be resistant to phishing, and also far more convenient as there is no need to rely on your memory or type anything in. All you need to authenticate your identity is whatever you use to lock your smart device - such as your PIN number, fingerprint or face.
Passwordless future
Passkeys are regulated by the FIDO alliance - specifically theFIDO2set of specifications. Most big tech companies are board-level members of the alliance, includingApple,Amazon,Google, andMicrosoft.Apple were the leaders of the packin supporting their use, with theothers following suit.
However, there are concerns that these companies could monopolize their use, tethering users to their own platforms by making them the only option to store and use passkeys.
Other password managers, though, have stepped up to the plate and now support - or will in the near future - the storage of passkeys on their cross-platform systems, including1PasswordandNordPass.
The death of passwords is near, so get your business ready>Are passwords and password managers still fit for purpose? And are the alternatives any better?>What are Passkeys?
Bitwarden acquired passwordless.devback in January, so we knew then it was likely on its way to joining them. And it is now one step closer to supporting passkeys with this new toolkit now launching in general availability. As far as we can tell, Bitwarden is the first free password manager to support passwordless solutions.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
But it has gone one step further than the others, by offering a toolkit to allow developers to create passkey authentication experiences for existing applications. This means they can potentially have a much wider implementation than they currently do. Only a handful of services, such asGoogle, PayPal, eBay and BestBuy allow users to use passkeys to login in to their respective accounts.
In Bitwarden’s own words, the toolkit has an “an extensive, easy-to-deploy API for integrating FIDO2 WebAuthn-based passkeys into consumer websites and enterprise applications.”
The company’s own research also found thatmost people are excitedabout a passwordless future, yetIT leaders are reluctant to implement passkeysbecause their applications are not designed for them. Bitwarden hopes to again to address this with the new toolkit.
The firm claims that it only takes “a few lines of code” to get passkeys up and running for existing applications. There is also an admin console in the toolkit so developers can configure applications, manage user attributes, and gain insight into passkey usage.
“Passwordless authentication is rapidly gaining traction because it offers a more secure and streamlined way for users to log into websites and applications,” said Michael Crandell, CEO of Bitwarden.
He added, “Bitwarden empowers developers with the flexibility and tools they need to implement passkey-based authentication quickly and easily, ultimately enabling better user experiences while maintaining the highest levels of security.”
Lewis Maddison is a Reviews Writer for TechRadar. He previously worked as a Staff Writer for our business section, TechRadar Pro, where he had experience with productivity-enhancing hardware, ranging from keyboards to standing desks. His area of expertise lies in computer peripherals and audio hardware, having spent over a decade exploring the murky depths of both PC building and music production. He also revels in picking up on the finest details and niggles that ultimately make a big difference to the user experience.
This new phishing strategy utilizes GitHub comments to distribute malware
Should your VPN always be on?
VIPRE Security Group says its new endpoint protection tools can stamp out even the latest cybersecurity threats
