Passkey Authentication

Passkey authentication is fully local-first and the most secure of the auth methods that Jazz provides because keys are managed by the device/operating system itself.

How it works

Passkey authentication is based on the Web Authentication API and uses familiar FaceID/TouchID flows that users already know how to use.

Key benefits

  • Most secure: Keys are managed by the device/OS
  • User-friendly: Uses familiar biometric verification (FaceID/TouchID)
  • Cross-device: Works across devices with the same biometric authentication
  • No password management: Users don't need to remember or store anything
  • Wide support: Available in most modern browsers

Implementation

Examples

You can try passkey authentication using our passkey example or the music player demo.

When to use Passkeys

Passkeys are ideal when:

  • Security is a top priority
  • You want the most user-friendly authentication experience
  • You're targeting modern browsers and devices
  • You want to eliminate the risk of password-based attacks

Limitations and considerations

  • Requires hardware/OS support for biometric authentication
  • Not supported in older browsers (see browser support below)
  • Requires a fallback method for unsupported environments

Browser Support

Passkeys are supported in most modern browsers.

For older browsers, we recommend using passphrase authentication as a fallback.

Additional resources

For more information about the Web Authentication API and passkeys: