Stake launches passkey authentication for enhanced user security

• Online gambling platform introduces biometric login system to replace traditional passwords and two-factor authentication codes
• Users can now access accounts using fingerprint, Face ID or device PIN without entering passwords or one-time verification codes
• The passkey technology leverages public-key cryptography developed by major tech companies and the Fast Identity Online Alliance

Stake has implemented passkey authentication across its platform, allowing users to log into their accounts using biometric verification or device PINs instead of traditional passwords.

Enhanced security measures

The new authentication system eliminates the need for players to remember complex passwords or wait for one-time verification codes sent via SMS or email. Instead, users can verify their identity through fingerprint scanning, Face ID, or a device PIN, providing both enhanced security and improved user experience.

Passkeys operate using public-key cryptography, where websites store a unique public key whilst the private key remains securely stored on the user’s device, password manager, or cloud keychain. This dual-key system prevents unauthorised access even if a company’s database is compromised, as the private key never leaves the user’s device.

“In an industry where trust and security are paramount, the move to passkey was an obvious next step”, said Stake Head of Product Andrew Forte. “We’re setting a new benchmark for player protection and convenience, removing password risk and proving that the most secure experience can also be the easiest.”

Industry-wide adoption

The technology has been developed by major tech companies including Apple, Google, Microsoft, and the Fast Identity Online (FIDO) Alliance. Passkeys are designed to be website-specific, meaning they cannot be used to access fraudulent or malicious sites, providing additional protection against phishing attacks.

“A passkey is a type of login method that enhances online account security while also being easier for you to access,” according to Stake’s official documentation.

The gambling industry has increasingly focused on robust authentication methods following various security incidents. In 2023, Stake experienced a major security breach resulting in approximately $38 million in losses due to private key vulnerabilities.

Implementation process

To set up passkeys on Stake, users must access their account settings, select the security option, and choose “Add Passkey” before following the setup prompts. The system maintains compatibility with existing security measures whilst offering the new passwordless option as an alternative login method.

The passkey system addresses common security vulnerabilities associated with traditional passwords, which can be guessed, shared, or compromised in data breaches. By eliminating passwords entirely, the technology removes these attack vectors whilst simplifying the login process for users.