myVicRoads iOS & Android Apps launch native Passkeys

1. myVicRoads App launches native Passkeys for iOS & Android#

With over 1 million passkeys issued and an 80% mobile activation rate on mobile web, VicRoads' passkey initiative has already proven to be a huge success. Consequently, the integration of passkey solution into the myVicRoads iOS and Android apps has been successfully achieved. This extension addresses critical security and user experience challenges by bringing phishing-resistant, biometric logins to Victorians' fingertips.

2. Why native Passkeys matter for Victorians#

In a time of increasing password fatigue and the rising threat of SMS phishing in Australia, securing high-value digital credentials like digital driver licences is of utmost importance, especially on mobile devices. Traditional authentication methods often introduce friction and are vulnerable to phishing attacks.

By integrating passkeys directly into the native myVicRoads app, VicRoads provides a seamless, secure and user-friendly authentication experience.

This omnichannel approach ensures that a passkey created on the web works instantly on the native mobile app, a key driver for user adoption.

3. Key Highlights of the native App Passkey Deployment#

The VicRoads implementation showcases the power and simplicity of Corbado's native passkey integration:

1. Fully Native Experience: The solution is built directly on native iOS AuthenticationServices framework and Android Credential Manager APIs, avoiding WebViews for a truly seamless and secure user experience.
2. Co-existence of Local Biometrics: The integration augments existing local device biometric protection piggy-backing on the passkey flow for effortless authentication.
3. Rapid Time-to-Value: The use of Corbado's native iOS and Android SDKs reduced the integration time from months to weeks, allowing for a swift rollout.

For more technical details, see our documentation on native SDKs.

4. UX Walk-through: iOS vs. Android#

The user experience is designed to be intuitive and flexible across both major mobile platforms.

4.1 myVicRoads Passkey Login#

In the following, you'll see the different ways how VicRoads customers can leverage passkeys for their login. Moreover, there is still a fallback to password and OTP/TOTP authentication.

4.1.1 iOS Login Modes#

Video: myVicRoads iOS Passkeys Login Flow

On iOS, there are three ways how VicRoads customers can sign into the app with passkeys.

1. Overlay: An operating system modal overlay that lets the user select the right passkey straight after loading of the login screen

2. Credential UI: An autofill suggestion to use a stored passkey on top of the keyboard

3. Text-field: After submission of the identifier, the passkey login starts

4.1.2 Android Login Modes#

Video: myVicRoads Android Passkey Login Flow

On Android, there is no Conditional UI available in native apps, so that there are are only two ways to sign into the app with passkeys.

1. Overlay: The Credential Manager bottom sheet provides a consistent and smooth login flow

2. Text-field: After identifier submissions, the passkey login flow begins

4.2 myVicRoads Passkey Append#

Passkeys can be appended to the customer account, either in the conventional login on the Passkey Append screen or in the account settings.

4.2.1 iOS Passkey Append#

On their first login with a traditional username and password, users are prompted for passkey creation. This simple but powerful feature significantly reduces user drop-off.

Video: myVicRoads iOS Create Passkey Flow

4.2.2 Android Passkey Append#

After a successful login with their username and password, a prompt from the Android Credential Manager appears, asking the user to create a passkey. This process is quick, intuitive, and helps drive passkey adoption without interrupting the user's journey.

Video: myVicRoads Android Create Passkey Flow

4.3 myVicRoads Passkey Management#

Users have full control over their passkeys, with the ability to view a list of their passkeys, add a secondary device, and delete passkeys as needed, all from within the myVicRoads app settings.

4.3.1 iOS Passkey Management#

Within the app's passkey settings, iOS users can view their active passkeys. A simple and intuitive interface allows them to add new passkeys on other credential managers or remove existing ones.

4.3.2 Android Passkey Management#

Similarly, Android users can manage their passkeys directly within the myVicRoads app. The passkey settings provide a clear overview of all created passkeys and users can easily add or revoke them.

5. How Corbado can help#

Shipping native passkeys into an app that already carries a live user base is mostly a question of control: who sees the prompt, on which build and what happens on a device that cannot complete the ceremony. Corbado Connect adds passkeys to an existing login instead of replacing it, which is why the myVicRoads apps kept the CIAM sitting behind them.

See how Corbado Connect ships this →

• Gradual Rollout: the rules read the client environment, so "native only", "this platform version and up" or "block WebView containers" become conditions in a ruleset rather than app code you have to ship through the two stores. Blocking WebView is one of the ready-made rule snippets the builder offers under "Quick Add".
• Association files: assetlinks.json and the Apple App Site Association document are served for your project, and the Android origins are assembled from the app signing fingerprints you register. This is the piece of a native integration that quietly breaks every ceremony when it is off by one hash.
• Adoption Improvement: before a prompt is drawn, Passkey Intelligence looks at what this user and this environment already hold, down to whether the passkey here is local to the device, synced or held in a password manager. Asking only where the answer can be yes is what the up to 10x higher passkey adoption rests on.

On the reporting side, Corbado Observe keeps app traffic apart from web traffic instead of averaging the two. Device Health reports ceremony outcomes per device and OS version in separate web and app cohorts, so a bad iOS build stays visible rather than being smoothed out by the mobile web numbers this article opens with.

6. VicRoads Passkeys: Results to Date#

The results of the VicRoads integration (for the web launch) speak for themselves:

• Over 1 million passkeys were created in the first few weeks.
• An 80% mobile activation rate, far exceeding the industry average of approximately 40%.

More details on this success story can be found in the FIDO Alliance case study.

7. See it in Action#

Download the myVicRoads app from the App Store or Google Play Store to experience native passkeys firsthand.

About Corbado

Corbado is the Passkey Intelligence Platform for large-scale CIAM teams running consumer authentication. We help you see what IDP logs and generic analytics tools can't: where passkeys, passwords, OTP, social login and fallback journeys succeed, stall or fail, which devices and browsers create friction, and when an OS update silently breaks login. Two products: Corbado Observe layers process mining and observability across authentication journeys. Corbado Connect adds managed passkeys with analytics built in alongside your IDP. VicRoads runs passkeys for 5M+ users with Corbado (+80% passkey activation). Talk to a Passkey Expert →

Frequently Asked Questions#

How does passkey login work differently on iOS versus Android in the myVicRoads app?#

iOS supports three login modes: an OS modal overlay, a Credential UI autofill suggestion and a text-field flow. Android supports only two modes, overlay via the Credential Manager bottom sheet and text-field, because Conditional UI is not available in native Android apps.

How does the myVicRoads app prompt existing password users to adopt passkeys?#

On first login with a username and password, users are prompted to create a passkey through a passkey append flow. On Android, the Credential Manager displays this prompt after a successful password login, driving adoption without interrupting the user journey.

What passkey management capabilities does the myVicRoads app provide to users?#

Users can view a list of active passkeys, add passkeys on secondary devices and delete existing passkeys directly within the myVicRoads app settings. Both iOS and Android provide dedicated passkey management screens, giving users full control over their credentials from within the app.

What enterprise tooling does Corbado offer to manage a large-scale native passkey rollout?#

Corbado's platform provides detailed analytics on native app passkey usage, funnel analysis to identify login patterns and gradual rollout controls to manage deployment progressively. These tools enable product teams to measure and improve passkey adoption across a large user base.