Authenticators Unlock the Key to Secure Logins

The passwordless future is rapidly approaching, and a key component of this transition is the "authenticator." As of November 14th, 2025, there are multiple types of authenticators that are integral to the passkey technology set to replace traditional usernames and passwords.

The article explains that passkeys involve four quasi-independent entities working together: the authenticator, the website/app, the operating system, and the web browser. Of these, the authenticator's role is the most confusing for users, yet also the most strategic.

Passkey authenticators come in three primary types: platform, virtual, and roaming. Platform authenticators are built into the operating system, like Microsoft's Trusted Platform Module. Virtual authenticators are integrated into password managers like 1Password and Bitwarden. Roaming authenticators are physical security keys that can act as both passkey authenticators and additional authentication factors.

Unfortunately, the industry's adoption of the term "passkey" has created a confusing "word salad" that is becoming a public relations problem for this otherwise promising technology. The article emphasizes that understanding the nuances between these authenticator types will be crucial for long-term credential management success as the passwordless future becomes a reality.