Passwordless authentication
Passwordless authentication is an authentication method in which a user can log in to a computer system without the entering (and having to remember) a password or any other knowledge-based secret. In most common implementations users are asked to enter their public identifier (username, phone number, email address etc.) and then complete the authentication process by providing a secure proof of identity through a registered device or token.

Passwordless authentication methods typically rely on Public-key cryptography infrastructure where the public key is provided during registration to the authenticating service (remote server, application or website) while the private key is kept on a user’s device (PC, smartphone or an external security token) and can only be accessed by providing a biometric signature or another authentication factor which isn't knowledge-based. 

These factors classically fall into two categories: 
* Ownership factors (“Something the user has”) such as a cellular phone, OTP token, Smart card or a hardware token.
* Inherence factors (“Something the user is”) like fingerprints, retinal scans, face or voice recognition and other biometric identifiers.

Some designs might also accept a combination of other factors such as geo-location, network address, behavioral patterns and gestures, as long as no memorized passwords are involved.

Passwordless authentication is sometimes confused with Multi-factor Authentication (MFA), since both use a wide variety of authentication factors, but while MFA is used as an added layer of security on top of password-based authentication, passwordless authentication doesn't require a memorized secret and usually uses just one highly secure factor to authenticate identity, making it faster and simpler for users.

"Passwordless MFA" is the term used when both approaches are employed and the authentication flow is both passwordless and uses multiple factors, providing the highest security level when implemented correctly.
Q212108
authentication
Concept
Q278368
user
Concept
Q161157
password
Concept
Q462624
secret
UNK
Q278368
identifier
Concept
Q201339
Public-key cryptography
Concept
Q16338
PC
Concept
Q22645
smartphone
Concept
Q1335365
security token
Concept
Q177765
biometric signature
Concept
Q17517
cellular phone
Concept
Q568494
OTP token
Concept
Q41349
Smart card
Concept
Q1335365
hardware token
Concept
Q178022
fingerprint
Concept
Q3329841
retinal scan
UNK
Q1192553
face
Concept
Q1145189
voice recognition
Concept
Q2221906
geo-location
Concept
Q4418000
network address
Concept
Q1063558
behavioral patterns
Concept
Q1519524
gestures
Concept
Q7878662
Multi-factor Authentication
Concept
Q96398509
Passwordless authentication
UNK
Q96398509
Passwordless authentication
UNK
Q96398509
Passwordless authentication
UNK
subclass of