A Universal Passkey is a public and private key pair. The private key is generated, stored, and never leaves the user’s devices’ hardware root of trust (i.e. Secure Enclave). The public key is sent to the Beyond Identity cloud. The private key cannot be tampered with, viewed, or removed from the device in which it is created unless the user explicitly indicates that the trusted device be removed. Passkeys are cryptographically linked to devices and an Identity. A single device can store multiple passkeys for different users and a single Identity can have multiple passkeys.

Hierarchy

  • Passkey

Properties

apiBaseUrl: string

The base URL for all binding & auth requests

created: string

The time this passkey was created.

id: string

The globally unique identifier of the passkey.

identity: PasskeyIdentity

Identity information associated with this passkey.

keyHandle: string

Associated key handle.

localCreated: string

The time when this passkey was created locally. This could be different from "created" which is the time when this passkey was created on the server.

localUpdated: string

The last time when this passkey was updated locally. This could be different from "updated" which is the last time when this passkey was updated on the server.

Realm information associated with this passkey.

state: "Active" | "Revoked"

Current state of the passkey.

Tenant information associated with this passkey.

Theme information associated with this passkey.

updated: string

The last time this passkey was updated.

Generated using TypeDoc