Passkey | Ohana Capital

Trading glossaryReviewed 16 July 2026

Definition

A passkey is a phishing-resistant sign-in credential based on public-key cryptography, with the private credential protected by a user device or provider.

In market context

The service stores a public key, while authentication requires the corresponding private key and typically a local device unlock such as a PIN or biometric. Because the credential is bound to the legitimate site, a fake domain cannot simply collect a reusable secret. Security still depends on device protection, account recovery, synchronization arrangements, and prompt removal of access from lost or untrusted devices.

Source

Use the primary source for fuller regulatory or market context.

NIST SP 800-63B — Authentication and Authenticator Management

Educational risk notice

This material is general education, not personal investment advice or a promise of results. Markets can move beyond planned levels, and losses can exceed expectations when leverage, liquidity, gaps, or operational failures are involved.

Read the full risk disclosure

Related glossary terms

Selected from explicit term relationships and shared tags.

beginner3 min

Multi-Factor Authentication (MFA)

Multi-factor authentication requires evidence from at least two distinct authentication-factor categories before granting access to an account or sensitive action.

security · authenticationRead guide

beginner3 min

Phishing

Phishing is a deceptive attempt to make a person reveal credentials, approve access, send assets, or install malicious software by impersonating trust.

security · fraudRead guide

beginner3 min

Identity Verification

Identity verification is the process of collecting and evaluating evidence to establish that an applicant is the person associated with a claimed identity.

compliance · identityRead guide

beginner3 min

Private Key

A private key is secret cryptographic material used to create signatures that authorize actions associated with its corresponding public key or blockchain address.

crypto · securityRead guide

Trading glossaryReviewed 16 July 2026

Definition

A passkey is a phishing-resistant sign-in credential based on public-key cryptography, with the private credential protected by a user device or provider.

In market context

Source

Use the primary source for fuller regulatory or market context.

NIST SP 800-63B — Authentication and Authenticator Management

Educational risk notice

Read the full risk disclosure

Related glossary terms

Selected from explicit term relationships and shared tags.

beginner3 min

Multi-Factor Authentication (MFA)

Multi-factor authentication requires evidence from at least two distinct authentication-factor categories before granting access to an account or sensitive action.

security · authenticationRead guide

beginner3 min

Phishing

Phishing is a deceptive attempt to make a person reveal credentials, approve access, send assets, or install malicious software by impersonating trust.

security · fraudRead guide

beginner3 min

Identity Verification

Identity verification is the process of collecting and evaluating evidence to establish that an applicant is the person associated with a claimed identity.

compliance · identityRead guide

beginner3 min

Private Key

A private key is secret cryptographic material used to create signatures that authorize actions associated with its corresponding public key or blockchain address.

crypto · securityRead guide