Say goodbye to passwords: welcome to passkeys

Convoflo version 2.19 marks an important step in security and ease of access: the support for passkeys. This emerging technology transforms how you access your online applications — and you'll never have to remember a password again.

But what exactly is a passkey? How does it work? And what are the prerequisites to use it with Convoflo? Let us explain everything below.

What is a passkey?

A passkey is a cryptographic access key that allows you to authenticate to an application without having to enter a password.

It relies on an open standard called WebAuthn (Web Authentication), developed by the W3C and the FIDO Alliance (Fast Identity Online). Unlike passwords, passkeys are:

• Immutable: They cannot be intercepted or guessed.
• Phishing-proof: They cannot be stolen through a fake website.
• Device-bound: They stay on your phone or computer and never leave your device.

How does it work technically?

Passkeys rely on asymmetric cryptography:

• A public key is stored on Convoflo’s servers.
• A private key, secret, remains stored on your device.

When you log in:

• Convoflo sends you a cryptographic challenge.
• Your device uses the private key to sign this challenge.
• The signature is verified with the public key.

✅ No password is sent.

✅ You log in with your fingerprint, facial recognition, or unlock code.

What are the prerequisites for using passkeys with Convoflo?

For passkeys to work, you need:

1. A compatible browser:

• Chrome
• Safari
• Edge
• Firefox (partially)

2. A compatible device:

• iPhone with iOS 16+
• Android with Android 9+
• Mac with macOS Ventura+
• Windows 10+ with a FIDO2 manager (like Windows Hello)

3. An integrated or synchronized key manager:

• iCloud Keychain (Apple)
• Google Password Manager
• 1Password (beta version)
• Windows Hello

Passkeys can also be synchronized across your devices via iCloud or your Google account, allowing you to log in even if you change devices.

Why is Convoflo adopting passkeys?

Convoflo is a secure client messaging platform used by accounting, legal, financial firms, and other professionals. Security is non-negotiable.

With passkeys, we add a highly robust layer of security, while simplifying the user experience:

• ✅ Less support related to forgotten passwords
• ✅ Faster login
• ✅ No compromise on data protection

How to activate passkeys in Convoflo?

Starting now, users can:

• Log in to their Convoflo account
• Go to Settings > Security
• Enable the "Login with passkey" option

A simple assistant will guide you through registering your passkey.

What if my device is not compatible?

No problem! The system automatically detects whether you're eligible or not. You can still use traditional password + MFA authentication. Passkeys are not mandatory but are highly recommended.

In conclusion, passkeys represent a major advancement in security and user experience. By integrating this technology today, Convoflo strengthens its position as a secure, modern, and future-proof platform.

Have any questions? Need assistance with activation? Feel free to contact our team :)