Technology / Privacy & Security
Cloudflare Access adds passkey sign-in
Users must first verify themselves through an existing login method.
Status: source-checked.
Cloudflare Access now supports passkeys for signing in to protected applications and its App Launcher, the company said in a Friday changelog. Users can use a passkey stored on a device, security key or password manager.
According to Cloudflare, enrollment requires users to verify their identity once with an existing login method. Administrators decide which applications accept passkeys and can remove registered credentials.
Passkeys change the sign-in method, not the underlying authorization decision: existing Access policies still determine whether someone can enter an application, Cloudflare said.
What we know / what we don't
What we know
- Cloudflare Access now supports passkeys for signing in to protected applications and its App Launcher, the company said in a Friday changelog. Users can use a passkey stored on a device, security key or password manager.
- According to Cloudflare, enrollment requires users to verify their identity once with an existing login method. Administrators decide which applications accept passkeys and can remove registered credentials.
- Passkeys change the sign-in method, not the underlying authorization decision: existing Access policies still determine whether someone can enter an application, Cloudflare said.
What we don't know
- The feature was checked against the announcement, not tested in a customer account.
The source record