myVicRoads iOS & Android Apps launch native Passkeys

With over 1 million passkeys issued and an 80% mobile activation rate on mobile web, VicRoads' passkey initiative has already proven to be a huge success. Consequently, the integration of passkey solution into the myVicRoads iOS and Android apps has been successfully achieved. This extension addresses critical security and user experience challenges by bringing phishing-resistant, biometric logins to Victorians' fingertips.

In a time of increasing password fatigue and the rising threat of SMS phishing in Australia, securing high-value digital credentials like digital driver licences is of utmost importance, especially on mobile devices. Traditional authentication methods often introduce friction and are vulnerable to phishing attacks.

By integrating passkeys directly into the native myVicRoads app, VicRoads provides a seamless, secure and user-friendly authentication experience.

This omnichannel approach ensures that a passkey created on the web works instantly on the native mobile app, a key driver for user adoption.

The VicRoads implementation showcases the power and simplicity of Corbado's native passkey integration:

1. Fully Native Experience: The solution is built directly on native iOS AuthenticationServices framework and Android Credential Manager APIs, avoiding WebViews for a truly seamless and secure user experience.
2. Co-existence of Local Biometrics: The integration augments existing local device biometric protection piggy-backing on the passkey flow for effortless authentication.
3. Rapid Time-to-Value: The use of Corbado's native iOS and Android SDKs reduced the integration time from months to weeks, allowing for a swift rollout.

For more technical details, see our documentation on native SDKs.

The user experience is designed to be intuitive and flexible across both major mobile platforms.

In the following, you'll see the different ways how VicRoads customers can leverage passkeys for their login. Moreover, there is still a fallback to password and OTP/TOTP authentication.

Video: myVicRoads iOS Passkeys Login Flow

On iOS, there are three ways how VicRoads customers can sign into the app with passkeys.

1. Overlay: An operating system modal overlay that lets the user select the right passkey straight after loading of the login screen

2. Credential UI: An autofill suggestion to use a stored passkey on top of the keyboard

3. Text-field: After submission of the identifier, the passkey login starts

Video: myVicRoads Android Passkey Login Flow

On Android, there is no Conditional UI available in native apps, so that there are are only two ways to sign into the app with passkeys.

1. Overlay: The Credential Manager bottom sheet provides a consistent and smooth login flow

2. Text-field: After identifier submissions, the passkey login flow begins

Passkeys can be appended to the customer account, either in the conventional login on the Passkey Append screen or in the account settings.

On their first login with a traditional username and password, users are prompted for passkey creation. This simple but powerful feature significantly reduces user drop-off.

Video: myVicRoads iOS Create Passkey Flow

After a successful login with their username and password, a prompt from the Android Credential Manager appears, asking the user to create a passkey. This process is quick, intuitive, and helps drive passkey adoption without interrupting the user's journey.

Video: myVicRoads Android Create Passkey Flow

Users have full control over their passkeys, with the ability to view a list of their passkeys, add a secondary device, and delete passkeys as needed, all from within the myVicRoads app settings.

Within the app's passkey settings, iOS users can view their active passkeys. A simple and intuitive interface allows them to add new passkeys on other credential managers or remove existing ones.

Similarly, Android users can manage their passkeys directly within the myVicRoads app. The passkey settings provide a clear overview of all created passkeys and users can easily add or revoke them.

Corbado's platform provides the tools necessary for a successful enterprise-grade passkey implementation:

• Detailed Analytics: Gain insights into the usage of native app passkeys.
• Gradual Rollout: Seamlessly manage the rollout of passkeys to your user base.
• Funnel Analysis: Identify login patterns and optimize the user journey.
• Adoption Improvement: Utilize data to improve overall passkey adoption.

The results of the VicRoads integration (for the web launch) speak for themselves:

• Over 1 million passkeys were created in the first few weeks.
• An 80% mobile activation rate, far exceeding the industry average of approximately 40%.

More details on this success story can be found in the FIDO Alliance case study.

Download the myVicRoads app from the App Store or Google Play Store to experience native passkeys firsthand.