1. Passkeys for web browsers and operating systems
Passkeys specially optimised for use with common web browsers (such as Chrome, Safari and Edge) and operating systems (Mac and Windows).
2. Passkeys for iOS and macOS
Passkeys designed specifically for iOS and macOS environments to enable seamless integration and strong authentication, including support from iCloud and various Apple services.
3. Passkeys for Android and Google devices
Passkeys designed for Android-based devices and Google services that include both hardware and software solutions to provide strong two-factor authentication.
4. Hardware security keys and USB/NFC devices
Physical security tokens that communicate via USB or NFC to ensure that authentication processes are carried out only with the correct device, including solutions such as YubiKey and similar devices.
5. Card and smart card-based authentication
Passkeys that are based on smart cards or authentication cards and used in professional or highly secure environments to ensure that only authorised users have access.
You can check the FIDO Alliance website to see if a particular passkey is certified: https://fidoalliance.org/certification/fido-certified-products/
Why does passkey fail for me?
Swisscom Trust Services only supports passkeys that comply with the FIDO2 standard and have been issued by certified platforms. Many password managers offer features similar to passkeys but are not FIDO2-certified.
For example, FIDO2-compatible passkeys are supported by:
-
Apple iCloud Keychain (on iPhones, iPads and Macs)
-
Google Password Manager (on Android devices with an additional security check such as the Android SafetyNet Attestation)
-
Windows Hello
-
Hardware security keys such as YubiKeys (with FIDO2 certification)
Note: FIDO2-compatible passkeys can also be used on Samsung devices – provided they are stored via Google Password Manager. Other systems such as Samsung Pass or Samsung Wallet are not currently supported.
Other problem sources: Some reasons why a passkey that has already been configured might not be used:
-
iCloud Keychain is active, but you are using an Android device – iCloud Passkeys are not available there.
-
Google Password Manager is active, but you are using a browser other than Chrome – FIDO2 is not supported in this case.
-
Windows Hello is active, but you are not using a Windows system, such as a smartphone or other operating system.
-
Android SafetyNet Attestation is required, but is not available on the device or it fails.
-
There is no FIDO2-compatible passkey set up on the current device.
In all of these cases, the alternative login method involving a password and second factor is automatically offered instead.
Tip: You can create additional passkeys on different devices at any time.