A Universal Passkey is a public and private key pair. The private key is generated and stored securely on the device's TEE. The public key is sent to the Beyond Identity cloud. The private key cannot be tampered with, viewed, or removed from the device in which it is created unless the user explicitly indicates that the trusted device be removed. Passkeys are cryptographically linked to devices and an Identity. A single device can store multiple passkeys for different users and a single Identity can have multiple passkeys.

Hierarchy

  • Passkey

Properties

apiBaseUrl: string

The base url for all binding & auth requests

created: string

The time this passkey was created.

id: string

The globally unique identifier of the passkey.

identity: Identity

Identity information associated with this passkey

keyHandle: string

Associated key handle

keyType?: KeyType

KeyType indicates where the key was created. This can be either "subtle" or "webauthn".

localCreated: string

The time when this passkey was created locally. This could be different from "created" which is the time when this passkey was created on the server.

localUpdated: string

The last time when this passkey was updated locally. This could be different from "updated" which is the last time when this passkey was updated on the server.

realm: Realm

Realm information associated with this passkey

state: "Active" | "Revoked"

The current state of this passkey

tenant: Tenant

Tenant information associated with this passkey

theme: Theme

Theme information associated with this passkey

updated: string

The last time this passkey was updated

Generated using TypeDoc