The short answer is yes
EU Login already support Passkeys even though this is not yet visible through the user interface. The technical mechanism (protocol) to authenticate you with a Passkey is similar to the one used with the Trusted Platform Module (TPM) and Security Key.
You may add a Passkey using the Add a Security Key option from your account menu.
What is a Passkey?
Passkeys are a replacement for passwords using cryptographic key pairs. While this may sound very complicated the process is quite simple: a Passkey consists of two cryptographic keys:
- A Private Key which is stored securely on your device (and can also be synchronised in the cloud)
- A Public Key that is shared with the service you are logging in (in this case, EU Login)
When trying to log in, the service sends a request to your device. Your device use the private key to answer the request and prove your identity. Your private key is however never shared with the device/cloud storage.
How can I add a Passkey?
Add your Passkey on your device
You may add a Passkey on a mobile device, either from the mobile device directly or from the EU Login website. Depending on your hardware and Operating System, the steps may very much differ, this is why we recommend you start from your mobile device.
Directly from your device
On your mobile device (Android or iOS phone, tablet...) follow these steps:
- Open your device web browser and authenticate with EU Login in Production or Acceptance
- Select Manage my Security Keys and Trusted Platforms and choose Add a Security Key
- Choose and enter a name for your device and click Submit
- Accept the prompt to create a Passkey on the mobile device by using biometric or PIN
Note: if your mobile device supports different ways to store the passkey, you will be prompted to chose one. This can determine if the passkey will be synced to the cloud or not.
From the EU Login web page
This may be more cumbersome depending on your Operating System (OS) version. Windows 10 will always follow the same sequence, proposing first to use the computer Windows Hello, then to add a security Key and finally will trigger your browser to add a Passkey.
- Ensure that both your computer and mobile device have internet connectivity and that the Bluetooth is enabled (devices do not need to be paired)
- Open your computer web browser and authenticate with EU Login in Production or Acceptance
- Select Manage my Security Keys and Trusted Platforms and choose Add a Security Key
- Choose and enter a name for your device and click Submit
- In the pop up, select the option with the QR code logo iPhone, iPad or Android device. This will generate a QR code
- Use your Mobile device to scan the QR code and follow the on screen instructions on your mobile device
In a Password Manager
You may add Passkeys in your password managers applications, which can usually be added as extension to your Web browsers. A large variety of password managers can be used, we suggest to select one available in the Extension manager of your web browser to ensure you can use it afterwards.
Please refer to your password manager's documentation to add a Passkey, the EU Login side of the procedure will be the same as for adding a Passkey from your device (see above).
Here are a few links from most popular ones that you may find useful:
Bitwarden, Dashlane, Proton, LastPass, Roboform, NordPass, Keeper
How can I use a Passkey to authenticate with EU Login?
Passkey saved on a mobile device
- Ensure both your laptop and mobile device have internet and Bluetooth enabled (no Bluetooth pairing required)
- On your computer, browse to EU Login authentication page in Production or Acceptance, enter your email or unique identifier and select the verification method Security Key or Trusted Platform
- Choose your Passkey from the list, this will trigger a pop-up menu where you can select the option with the QR code logo iPhone, iPad or Android device. This will generate a QR code
- Use your Mobile device to scan the QR code and follow the on screen instructions on your mobile device
Note: Once authenticating using the QR code method you will be offered to skip this steps for the next authentication. From there on you may select directly your mobile device from the browser pop up menu, making the authentication process much easier.
Passkey saved on a Password Manager
We advise you to refer to your product documentation but the use of Password Manager is usually very straightforward. The biggest advantage of using this method is that it can work on remote desktop as long as you can install the browser extension needed, and that your remote server has an internet connection. The downside is that your private key is stored in the cloud, making the process less secured.