CyberArk Adds New Passkeys Authentication Options to Reduce Risk


CyberArk, an identity security provider, has expanded passwordless authentication capabilities with new passkeys support, the company announced.

The feature enables CyberArk Identity customers to accelerate passwordless adoption and reduce cybersecurity risk by enabling the use of passkeys to easily access apps and websites using strong authentication methods like biometrics.

“Passwords are the weakest link in the security chain, and they are often the root cause of data breaches and cyberattacks,” said Gil Rapaport, CyberArk access general manager. “By introducing passkeys for passwordless authentication, we are further enabling our customers to eliminate passwords from their authentication workflows,” he said.

Passkey Support Benefits

According to CyberArk, passkeys support provides these benefits:

  • Passkeys extend a passwordless strategy to reduce the attack surface and minimize credential theft.
  • The addition of passkeys provides CyberArk Identity customers with phishing-resistant, FIDO2-compliant credentials that replace passwords. This offers the strongest level of protection against identity theft and account takeover and is a NIST Authentical Assurance Level (AAL3) authentication method.
  • Passkeys work across user devices, and even work on those within physical proximity, improving user experiences by simplifying and speeding up authentication flows.
  • CyberArk Identity also provides support for YubiKey One Time Passcode (OTP). YubiKey is a widely used physical authentication device that complies with NIST 800-63B guidelines regarding Authentication Assurance Level 2 (AAL2). With the OTP generated by their YubiKey, users can securely authenticate to any application protected by CyberArk Identity.

“By extending passwordless authentication options, not only are we helping to eliminate password-based risk for our customers, we are also improving productivity and the overall user experience,” said Rapaport.

Passwordless authentication with passkeys is available now as part of the CyberArk Identity 23.11 release, the company said.

D. Howard Kass

D. Howard Kass is a contributing editor to MSSP Alert. He brings a career in journalism and market research to the role. He has served as CRN News Editor, Dataquest Channel Analyst, and West Coast Senior Contributing Editor at Channelnomics. As the CEO of The Viewpoint Group, he led groundbreaking market research.