Passkeys?

[WillKirk]

When logging into this community site to make this very post, the login page for the password has a section called Passkeys. This is what it says when clicked on:

Passkeys

Passkeys are a new alternative to passwords.

When you set one up, a pair of secure digital keys are created. One key is stored on your device and the other is shared with us. When you log in to our app or website, we check your device has its key and confirm you're authenticated with your fingerprint, PIN or face ID. If everything matches up, you'll be passed straight into your account.

Passkeys are more secure than passwords as they require your physical device and can't be leaked online.

To set up a passkey, visit the security section in your Profile.

Now I know what Passkeys are, and use them on other sites, but I am unable to find the 'security section' where I can use them with EE, nor can I find any tell of them anywhere else on the EE Community or website - yet the information is there as if there 'should be' Passkeys available as a login option.

Anyone know more about this?

[Safwanm]

I think it's just an introduction message for a general security rollout over the next few weeks. I see on the EE website they're requiring 2FA and that's what I only find in my security section on the Web.

[mkcomputing]

Great question. I keep seeing the same thing. Not just on EE but on sites that know what they are doing. None answer you questions.

I have set up a bunch of 2FA logins and happily use a PIN for Microsoft. If EE wants us to use this, it would be a good idea to have an FAQ of some sort.

Better still start with BT, EE's owner, where it is hell's own difficulty to login as you go round in circles trying to navigate prompt after prompt to get to different bits of the system.

In my case, things may be complicated because I use Roboform software as a password management. Where does that come into the picture?

[Safwanm]

The problem with passkeys currently is that's it's locked to the OS providers mostly (MS, Apple, Google).

Support for third party password apps is in the very early stages. 

[mkcomputing]

Thanks for the pointer. I now see it in Microsoft. Found some light reading to chase up.

Seems to be a lot of stuff out there.

I hope it has nothing to do with the rising flood of complaints here from peolple who cannot access the EE site to downloads bills and manage their accounts.

[Safwanm]

I'd say the bills issue is a separate thing that they need to address urgently.

Passkeys is more to deal with the problem that the average Joe uses a weak password / forgets their password. 

[mkcomputing]

Definitely. I just wondered if there might be some link between the recent attempts to encourage 2FA and the growing disaster on bills and related issues. They seem to have arrived around he same time.

[Linzi_H]

Hi @WillKirk 

Thanks so much for letting us know about this. 

I have flagged your feedback with the relevant team, and this has currently been removed as an option.

Linzi 

[michael23578925]

Please can you pass on to the relevant team the reminder that passkeys have inbuilt phishing and 2fa protections. So SMS 2fa is not necessary and can be removed if passkeys are enabled on an account. I say this because many high profile sites have very poor implementation not realising this 

Definitely looking forward to passkeys with EE if they are properly implemented. Can't come soon enough!

Thanks

[Linzi_H]

Hi @michael23578925 

Thanks for sharing this with us, I will certainly pass your comments across to the team.

Linzi