“Instead of you creating and remembering a shared secret, like a password, your device generates a secure key pair – one part stays on your device, and the other sits with the service you’re logging into,” says Daniel Card of BCS, the Chartered Institute for IT.
