拥抱 Grab 的 Passkey 无密码认证

This blog post introduces Passkey — our latest addition to the Grab app — a step towards a secure, passwordless future. It provides an in-depth look at this innovative authentication method that allows users to have full control over their security, making authentication seamless and phishing-resistant. By the end of this piece, you will understand why we developed Passkey, how it works, the challenges we overcame, and the benefits brought to us post-launch. Whether you’re a tech enthusiast, a cybersecurity follower, or a Grab user, this piece offers valuable insights into the passwordless authentication sphere and Grab’s commitment to user safety and comfort.

这篇博客文章介绍了 Passkey——我们在 Grab 应用中的最新添加——迈向安全、无密码未来的一步。它深入探讨了这种创新的身份验证方法，使用户能够完全控制他们的安全性，使身份验证无缝且抗钓鱼。在本文结束时，您将了解我们为什么开发 Passkey、它如何工作、我们克服的挑战以及发布后带来的好处。无论您是技术爱好者、网络安全追随者还是 Grab 用户，这篇文章都提供了有关无密码身份验证领域和 Grab 对用户安全与舒适承诺的宝贵见解。

Introduction

介绍

In the evolving world of digital security, Grab has always prioritised user account safety. A significant part of this involves exploring more secure and user-friendly authentication methods. Enter Grab’s Passkey — a major step towards passwordless authentication that leverages the Fast IDentity Online (FIDO) standard, giving users full control over their security, and making authentication seamless.

在不断发展的数字安全世界中，Grab 一直优先考虑用户账户的安全性。其重要部分之一是探索更安全且用户友好的身份验证方法。引入 Grab 的 Passkey——迈向无密码身份验证的重要一步，利用快速身份在线 (FIDO) 标准，使用户能够完全控制他们的安全性，并使身份验证无缝。

Background

背景

Traditionally, the authentication process primarily relies on passwords — a precarious practice given the vulnerability to various security threats, such as phishing, keystroke logging, and brute-force attacks. This downside leads to the pursuit of safer, more user-friendly alternatives. Among these is the introduction of passwordless authentication.

传统上，身份验证过程主要依赖于密码——这种做法由于易受各种安全威胁（如网络钓鱼、键盘记录和暴力破解攻击）的影响而显得不稳定。这一缺点导致了对更安全、更用户友好的替代方案的追求。其中之一就是引入无密码身份验证。

A passwordless authentication method eliminates the need for users to enter traditional passwords during the verification process....