# Amapasskeys, ngaphansi kwendawo

Published: 2026-09-19

I-passkey iyiphasiwedi idivayisi yakho eyiqambayo, engakukhombisi lutho futhi enqaba ukuyinika noma ubani — kuhlanganisa nawe. Ngaphansi kwendawo: umcimbi we-WebAuthn (i-key pair ngayinye yesayithi, inselelo, isignesha), indawo eyodwa isiphequluli esiyibhala ebulala ubugebengu bokweba imininingwane ebucayi (origin), okhiye ababoshelwe kudivayisi vs okhiye abavumelanisiwe, i-AAGUID, nokuthi kungani "okungeke kwebezelwe" kanye "nokungeke kususwe" kuyimpahla efanayo — okuwukuthi "Angiwathandi amapasskey" (amaphuzu angu-616 ku-Hacker News) yikho impela. Isinqumo: IDINGA UKUHLOLWA — umcimbi ulethwe, isikhathi sokuphila siwumbhalo osasebenza.

Canonical: https://thedailydiff.dev/zu/video/2026-09-19-passkeys-under-the-hood/

## Lokho okuhlanganiswa yile vidiyo

- Iphasiwedi idivayisi yakho eyiqambayo futhi engakukhombisi lutho
- Izinombolo ezintathu: ama-passkey ayizigidigidi ezi-5, impumelelo yokungena engu-98%, ukungena kwe-Google okuyisigidigidi esi-1
- 2013 → 2022: ukuthi i-FIDO yabulala kanjani iphasiwedi, kancane kancane
- Umcimbi: i-key pair eyodwa ngesayithi, inselelo, isignesha
- Kungani ubugebengu bokweba imininingwane ebucayi bufayo: isiphequluli sibhala i-origin

## Izahluko

- 0:00 Iphasiwedi idivayisi yakho eyiqambayo futhi engakukhombisi lutho
- 0:11 Izinombolo ezintathu: ama-passkey ayizigidigidi ezi-5, impumelelo yokungena engu-98%, ukungena kwe-Google okuyisigidigidi esi-1
- 0:37 2013 → 2022: ukuthi i-FIDO yabulala kanjani iphasiwedi, kancane kancane
- 0:59 Umcimbi: i-key pair eyodwa ngesayithi, inselelo, isignesha
- 1:16 Kungani ubugebengu bokweba imininingwane ebucayi bufayo: isiphequluli sibhala i-origin
- 1:29 Lapho i-private key ihlala khona: iboshelwe kudivayisi vs ivumelanisiwe
- 1:51 Zombili izindaba ziqinisile: ngokushesha, ngamandla, kukhiyiwe
- 2:14 Isilungiselelo: ukushintshaniswa kwezinsalela ze-FIDO (CXF/CXP) nokuma kwayo
- 2:33 NgoMsombuluko: okumele ukwenze ngama-akhawunti akho
- 2:54 Isinqumo: IDINGA UKUHLOLWA

## Umbhalo obhaliwe ohunyushwe

Kuhunyushwe kusuka ekulandiseni kokuqala kwesiNgisi. Umsindo namazwibela atholakalayo alawulwa yi-YouTube.

### Iphasiwedi idivayisi yakho eyiqambayo futhi engakukhombisi lutho

0:00 I-passkey iyiphasiwedi idivayisi yakho eyiqambayo, engakukhombisi lutho, futhi enqaba ukuyinika noma ubani, kuhlanganisa nawe, okuwumsebenzi wonke wezokuphepha futhi, kusukela ngoLwesine, isikhalazo sonke.

### Izinombolo ezintathu: ama-passkey ayizigidigidi ezi-5, impumelelo yokungena engu-98%, ukungena kwe-Google okuyisigidigidi esi-1

0:11 Izinombolo ezintathu. I-FIDO Alliance ibala ama-passkey ayizigidigidi ezinhlanu asetshenziswayo. IMicrosoft ikala impumelelo yokungena engamaphesenti angu-98 ngawo, ngokumelene nama-32 amaphasiwedi. Futhi okuthunyelwe okunesihloko esithi Angiwathandi amapasskey kusebenzise usuku lonke phezulu ku-Hacker News ngamazwana angamakhulu ayisithupha. Emizuzwini emithathu: ukuthi avelaphi, ukuthi isiphequluli sakho sisayina ini ngempela, nokuthi kungani okungenakwebiwa nokungenakususwa kuyigama elifanayo. Lona yiThe Daily Diff, ngaphansi kwendawo.

0:36 2013. I-PayPal, i-Lenovo kanye ne-start-up ebizwa nge-Nok Nok bakha i-FIDO

### 2013 → 2022: ukuthi i-FIDO yabulala kanjani iphasiwedi, kancane kancane

0:41 Alliance ukubulala iphasiwedi. Ngo-2014, i-Google ne-Yubico bathumela i-U2F security key. Ngo-2019, i-WebAuthn yaba indinganiso ye-W3C. Futhi ngo-2022 i-Apple, i-Google ne-Microsoft bayiqamba kabusha amapasskey, ngoba akekho owake wathenga okuthile okubizwa nge-discoverable resident credential.

### Umcimbi: i-key pair eyodwa ngesayithi, inselelo, isignesha

0:59 Umcimbi. Lapho ubhalisa idivayisi yakho ikhiqiza i-key pair entsha yalowo sayithi elilodwa. I-public key iya kuseva; i-private key ihlala ku-chip. Lapho ungena iseva ithumela inselelo engahleliwe, idivayisi iyayisayina, futhi iseva ihlola isignesha ngokumelene ne-public key eyigcinile. Alikho imfihlo kuseva engavuza. Ingxenye yobugebengu bokweba imininingwane ebucayi yindawo eyodwa.

### Kungani ubugebengu bokweba imininingwane ebucayi bufayo: isiphequluli sibhala i-origin

1:17 Ngaphambi kokuba idivayisi isayine, isiphequluli, hhayi ikhasi, sibhala i-origin yangempela kudatha esayiniwe. I-domain efanayo ithola isignesha ye-domain engalungile, futhi iseva yangempela iyayinqaba. Umsebenzisi angakhohliswa; izibalo azikwazi. Ngakho-ke i-private key ihlala kuphi?

### Lapho i-private key ihlala khona: iboshelwe kudivayisi vs ivumelanisiwe

1:30 Okuboshelwe kudivayisi kusho i-security key, lapho ingaphumi khona, futhi i-YubiKey ibamba ikhulu. Okivumelanisiwe kusho i-iCloud Keychain, i-Google Password Manager, 1Password noma i-Bitwarden, lapho ukhiye uhlala ku-end-to-end i-vault efihliwe futhi ilandela i-akhawunti yakho. Isayithi lingasho ukuthi yikuphi kusuka ku-id yemodeli eyishumi nesithupha yebhayithi ebizwa nge-AAGUID, futhi amasayithi amaningi ayakushaya indiva.

### Zombili izindaba ziqinisile: ngokushesha, ngamandla, kukhiyiwe

1:51 Ngakho zombili izindaba ziqinisile. Ukungena kusheshe futhi kunamandla, futhi inhlolovo ye-FIDO ithi abathathu kubane kubathengi banayo. Kodwa imfihlo ongeke uyifunde ayikwazi ukwebiwa futhi ayikwazi ukususwa ngasikhathi sinye: lapho ifoni ifa, noma irobhothi likuvimba i-akhawunti yakho ye-Google, yonke i-passkey engaphakathi ihamba nayo. UHawksley ukubiza lokho ngokuthi kufaneleka kahle enkampanini futhi kungafaneleki kahle kumuntu; UNikita Bier ukubiza ngokuthi uthuli lwengqondo olumlingo.

### Isilungiselelo: ukushintshaniswa kwezinsalela ze-FIDO (CXF/CXP) nokuma kwayo

2:14 Isilungiselelo sinengama. Ifomethi yokushintshanisa izinsalela ze-FIDO ifinyelele indinganiso ehlongozwayo, futhi i-iOS 26 ne-Android manje zihambisa ama-passkey phakathi kwabaphathi nayo. I-protocol eseceleni kwayo iseyumbhalo osasebenza, iminyaka emibili. Okhiye beHardware abakaze bathunyelwe ngaphandle ngecebo, ngakho isipele esisemthethweni yisibili ukhiye we-hardware, isincomo esinesibhengezo senani.

### NgoMsombuluko: okumele ukwenze ngama-akhawunti akho

2:33 Ngakho, ngoMsombuluko. Okokuqala: gcina iphasiwedi kanye nohlelo lokusebenza lokuqinisekisa kuwo wonke i-akhawunti kuze kube yilapho ukuthekelisa kukusebenzela; indlela yokubuyisela ebuthakathaka ukuphepha kwakho kwangempela ukuphepha. Okwesibili: okuboshelwe kudivayisi kusho okhiye ababili ngosuku lokuqala. Okwesithathu, uma wakha ukungena: funa ukhiye ohlala khona, qinisekisa i-origin kuseva, futhi uyeke ukufuna i-passkey kumuntu owayekade eseyisebenzisile. Isinqumo, ngaphansi kwendawo: sidinga ukuhlola.

### Isinqumo: IDINGA UKUHLOLWA

2:56 Umcimbi ulethwe. Isikhathi sokuphila siwumbhalo osasebenza. Uma ungathanda ukufunda lokhu kunokuzwa ngikusho, i-diff ifika ebhokisini lakho leposi njalo ekuseni, mahhala ku-the daily diff dot dev, isixhumanisi ngezansi. Futhi yilokho okuhlukile kwanamuhla. NginguNiko ovela ku-Axrisi. Hlanganisa ngokuzibopha.

## Imithombo

- [Ethan Hawksley, "I don't like passkeys" (18 Sep 2026) — https://hawksley.dev/blog/i-dont-like-passkeys · HN (616 points)](https://news.ycombinator.com/item?id=49753211) — news.ycombinator.com
- [W3C Web Authentication Level 3](https://www.w3.org/TR/webauthn-3/) — www.w3.org
- [Trail of Bits, "The cryptography behind passkeys"](https://blog.trailofbits.com/2025/05/14/the-cryptography-behind-passkeys/) — blog.trailofbits.com
- [FIDO Alliance, "The State of Passkeys 2026" (5 billion passkeys; 90% familiar, 75% enabled; n = 11,000)](https://fidoalliance.org/the-state-of-passkeys-2026-global-consumer-and-workforce-report/) — fidoalliance.org
- [Microsoft, "Convincing a billion users to love passkeys" (98% vs 32% success, 3× faster, 7,000 password attacks/s)](https://www.microsoft.com/en-us/security/blog/2024/12/12/convincing-a-billion-users-to-love-passkeys-ux-design-insights-from-microsoft-to-boost-adoption-and-security/) — www.microsoft.com
- [Google, 1 billion passkey sign-ins across 400 million accounts (May 2024)](https://blog.google/technology/safety-security/google-passkeys-update-april-2024/) — blog.google
- [FIDO Credential Exchange specs (CXF 1.0 Proposed Standard, CXP Working Draft)](https://fidoalliance.org/specifications-credential-exchange-specifications/download-credential-exchange-specifications/) — fidoalliance.org
- [Android passkey transfer via CXF (heise, Sep 2026)](https://www.heise.de/en/news/Password-managers-on-Android-Switch-without-manual-export-11450892.html) — www.heise.de
- [Yubico, YubiKey 5.7: 100 passkeys per key](https://www.yubico.com/blog/empowering-enterprise-security-at-scale-with-new-product-innovations-yubikey-5-7-and-yubico-authenticator-7/) — www.yubico.com
- [William Brown, "Passkeys: A Shattered Dream"](https://fy.blackhats.net.au/blog/2024-04-26-passkeys-a-shattered-dream/) — fy.blackhats.net.au