Access Keys in iOS 16.3

iOS 16.2 is now available worldwide and with this release many new features and tools like the Freeform app. However, Apple continues its momentum to improve its operating systems and already released the first beta version of iOS 16.3 for developers. One of the features of this new version that we will probably see throughout the first months of 2023 is the iOS 16 compatibility with 2FA security keys (two-factor security), which would replace the verification codes so commonly used. This is an additional gesture from Apple to adapt to new authentication standards within the FIDO ecosystem.

Apple moves closer to FIDO with iOS 16.3 support for security keys

To understand a little the importance of these two-factor security keys It is essential to understand how the FIDO (Fast Identity Online) standard has drifted in recent years. Today, you should understand that most services that use two-factor authentication require user authentication in two different ways. In fact, currently, we have three ways: username and password, something we “have” (smartphone, SMS, 2FA keys…) and something we “are” (Face ID, fingerprint…).

Access keys replace passwords and are designed to allow you to log in to websites and applications without having to enter a password for a more convenient and secure experience. Access keys are standard technology that, unlike passwords, are phishing-resistant, always strong, and designed so there are no shared secrets. They simplify account sign-up for apps and websites, are easy to use, and work on all Apple devices (and even non-Apple devices if you’re around).

When we are able to authenticate in one of these two ways, the service detects that we actually have control of the account and grants us access. The physical security keys These are portable devices that can be carried with you and logged into the device to provide the verification code needed to access your account.

iOS 16.3 adds support for physical security keys in Apple ID. In the settings we can save a new key that will allow authentication when logging into a new device or accessing a certain Apple ID. In fact, those in Cupertino assure that these physical security keys provide solid protection against phishing and unauthorized account access.