175 Million Amazon Customers Are Using Passkeys to Access Accounts

E-commerce giant Amazon says millions of customers are using passkeys to log into their Amazon accounts, giving these users "the convenience of passwordless sign-in."

Passkeys allow users to sign into apps and websites like they do on mobile phones—using a face scan, fingerprint, or lock-screen PIN. Amazon rolled out passkey support on browsers and mobile apps last year.

"When a customer uses a passkey on their device, it proves they have their device and are able to unlock it. Customers no longer need to worry about remembering unique passwords or using easy-to-guess identifiers, like names or birthdays," Amazon states.

Passkeys cannot be written down or guessed, ensuring they cannot be accidentally shared with a bad actor, the company noted. Amazon says passkeys are less susceptible to phishing attacks than passwords or one-time codes sent through text messages.

This makes passkeys "a more secure option for our customers," the e-commerce company said.

While passkeys offer more security, it does not mean a user who makes use of this login technique will be completely safe from attackers.

A complaint about passkeys has been that there is no standard protocol that allows users to transfer passkeys across password managers.

FIDO said that more than 12 billion online accounts today use passkeys. The technology has made sign-ins up to 75 percent faster and reduced phishing, it said.

FIDO Alliance CEO Andrew Shakier said the new web resource will accelerate the use of passkeys by providing website and app owners with "independent and authoritative guidance" on how to implement the technology.

Passkeys face significant challenges when it comes to widespread adoption. Because passkeys require devices such as smartphones to authenticate, individuals who do not have these devices will not be able to use the new sign-in method.

"If someone gets your device, they can't do anything with your passkey. And if you lose your old device containing your passkey, you can easily create a new passkey on your new device," Google said.