VicRoads wins CIO50 Customer Value Award 2025

1. VicRoads wins CIO50 2025 Customer Value Award with industry-leading Passkey Adoption#

VicRoads, Victoria's vehicle registration and driver licencing authority, has won the prestigious "Team of the Year – Customer Value" award at the CIO50 2025 Awards. The organisation achieved this recognition for delivering one of the first and most successful large-scale passkey deployments in the public sector.

The deployment enables nearly 5 million users to use passkeys, with over one million passkeys created in just three months and an estimated 15,000 days saved annually in login time while significantly improving security. These outcomes demonstrate the viability of large-scale passwordless authentication in government services.

Corbado served as the technology partner for this implementation, providing the passkey authentication platform that enabled VicRoads' transformation.

2. Implementation Approach: Seamless Integration without Disruption#

The implementation strategy focused on integrating passkey functionality with VicRoads' existing infrastructure rather than requiring a ground-up rebuild. The passkey solution integrated with VicRoads' existing Customer Identity and Access Management (CIAM) system, with no migration of user data or authentication methods required.

The implementation included technical guidance on browser compatibility, recovery flows and UX optimisations to address passkey-specific challenges. Pre-built, passkey-optimized components and SDKs accelerated the integration timeline and enabled a phased rollout approach.

A key architectural decision involved layering passkeys on top of VicRoads' current login system rather than replacing it. This approach preserved all existing users and enabled VicRoads to deploy passwordless authentication at scale within weeks rather than months, demonstrating that large organisations can adopt modern authentication technologies without disruptive migration projects.

3. Deployment Results and Performance Metrics#

The VicRoads passkey deployment achieved measurable outcomes across multiple dimensions. The following metrics were observed during the initial rollout period:

3.1 User Adoption Rates#

Passkey activation rates peaked at 80% on mobile devices (over 50% across all platforms) during the initial rollout. These adoption rates demonstrate significant user acceptance of the phishing-resistant, biometric authentication method.

3.2 Authentication Method Transition#

Within seven weeks, 30% of all VicRoads logins were already occurring via passkeys instead of passwords or OTPs, with the proportion continuing to increase steadily over time.

3.3 Scale of Deployment#

In the first three months, VicRoads users created over one million passkeys, demonstrating the scale and reach of the deployment across the user base.

3.4 Time Efficiency Gains#

Analysis estimates that the transition to passwordless logins saves VicRoads users 15,000 days worth of time annually – time previously spent typing passwords, waiting for SMS codes or completing account recovery processes.

3.5 Operational Cost Reduction#

The implementation resulted in reductions in authentication-related support tickets and SMS one-time password costs. Fewer login issues and reduced support requests contributed to decreased IT support burden and messaging infrastructure expenses.

3.6 Security and User Experience Improvements#

Passkeys provide inherent phishing resistance and eliminate shared secrets vulnerable to interception. The authentication method combines biometrics or device PINs with cryptographic security, addressing both security requirements and user experience considerations. User feedback indicated positive reception of the technology's ease of use without security compromises.

These outcomes demonstrate that security and usability can be simultaneously improved through modern authentication technologies. The elimination of passwords reduced user friction while strengthening account security, aligning with VicRoads' objectives for secure, frictionless digital services at scale.

4. Implications for Government and Enterprise Authentication#

The deployment serves as a case study for government agencies and enterprises evaluating modern authentication approaches. Key learnings include the viability of non-disruptive integration with existing systems, the importance of phased rollout strategies and the demonstrable user acceptance of biometric authentication when properly implemented.

5. Conclusion: Passwordless Authentication at Scale#

VicRoads' award-winning deployment demonstrates that passwordless authentication can be successfully implemented at scale within complex organizational environments. The case study provides evidence that large user bases can transition to passkey-based authentication without operational disruption, achieving both security improvements and user experience gains.

The implementation validates several key principles for large-scale passkey adoption:

• Non-disruptive integration with existing authentication infrastructure is technically feasible
• User adoption rates can reach significant levels when implementation addresses usability considerations
• Operational benefits include reduced support costs and improved time efficiency
• Standards-based approaches enable interoperability and future flexibility

Organizations considering passkey implementation can leverage these learnings to inform their authentication modernisation strategies.

About Corbado

Corbado is the Passkey Intelligence Platform for CIAM teams running consumer authentication at scale. We help you see what IDP logs and generic analytics tools can't: which devices, OS versions, browsers and credential managers support passkeys, why enrollments don't turn into logins, where the WebAuthn flow fails and when an OS / browser update silently breaks login, all without replacing Okta, Auth0, Ping, Cognito or your in-house IDP. Two products: Corbado Observe layers observability for passkeys and any other login method. Corbado Connect adds managed passkeys with analytics built in (alongside your IDP). VicRoads runs passkeys for 5M+ users with Corbado (+80% passkey activation). Talk to a Passkey Expert →

Frequently Asked Questions#

How quickly can a large government organization deploy passkeys without disrupting existing users?#

VicRoads deployed passkeys to nearly 5 million users within weeks, not months, by layering the solution onto its existing CIAM system with no user data migration required. Corbado provided pre-built passkey-optimized components and SDKs that accelerated integration and enabled a phased rollout.

What passkey adoption rates can an organization realistically expect in the first few months?#

VicRoads achieved activation rates of 80% on mobile devices and over 50% across all platforms during initial rollout. Within 7 weeks, 30% of all logins were occurring via passkeys, with the proportion continuing to grow steadily beyond that point.

What operational cost reductions does replacing SMS OTPs with passkeys deliver for a government agency?#

VicRoads reduced authentication-related support tickets and SMS one-time password infrastructure costs after deploying passkeys. Combined, these savings and the elimination of password-related friction account for an estimated 15,000 days of user time saved per year.

How does integrating passkeys on top of an existing login system differ from a full authentication migration?#

Layering passkeys onto an existing system means adding passkey support to the current CIAM infrastructure without replacing it, preserving all existing users and authentication methods. VicRoads avoided any data migration project entirely, which is why full deployment was achievable in weeks rather than months.