---
url: 'https://www.corbado.com/faq/identifier-first-approach-passkey-login'
title: 'How does the Identifier-First Approach work for passkeys?'
description: 'Understand how the "Identifier-First Approach" simplifies passkey login, improves user experience, and boosts adoption.'
lang: 'en'
keywords: 'identifier-first approach, WebAuthn identifier-first, seamless passkey integration'
---

# How does the Identifier-First Approach work for passkeys?

## How Does the "Identifier-First Approach" Work for Passkey Login?

The "Identifier-First Approach" is a seamless method for integrating passkeys into an
authentication system by prioritizing the user's identifier (e.g., email or username) in
the login process.

### User Experience

1. The user enters their email or username first.
2. The system checks if a passkey is available for the identifier.
    - If a passkey is available: The user is prompted to authenticate using biometrics
      (e.g., fingerprint or face recognition) or a PIN.
    - If no passkey is available: The user is directed to
      [alternative login methods](https://www.corbado.com/faq/passkeys-fallback-options) like passwords or
      multi-factor authentication (MFA).
3. After successful login, users are encouraged to
   [create a passkey](https://www.corbado.com/blog/passkey-creation-best-practices) for future use.

### Benefits

- **Seamless User Experience:** Reduces steps for users with registered passkeys, enabling
  a smoother and quicker login process.
- **Higher Passkey Usage:** By integrating passkeys into the primary flow, users are more
  likely to adopt them.
- **Cost Savings:** Increased adoption reduces reliance on SMS OTPs, saving costs.

### Challenges

- **Account Enumeration Risk:** If not managed properly, it may expose whether an email or
  username is registered. Mitigation strategies, such as bot management and rate limiting,
  are crucial.
- **Technical Complexity:** Requires advanced logic to determine
  [passkey availability](https://www.corbado.com/faq/are-passkeys-available) and handle fallback scenarios.

### Real-World Example

Google employs the identifier-first approach for its login systems, offering an automatic
and seamless [passkey login](https://www.corbado.com/blog/passkey-login-best-practices) experience where
available.

This method is ideal for organizations focused on improving user experience while
maximizing [passkey adoption](https://www.corbado.com/blog/passkey-adoption-business-case) and reducing
authentication costs.

## Read the full article