---
url: 'https://www.corbado.com/faq/password-passkey-authentication'
title: 'What is the "Password + Passkey" method for authentication?'
description: 'Learn how the "Password + Passkey" method enhances security by combining traditional passwords with passkey-based second-factor authentication.'
lang: 'en'
keywords: 'password + passkey, passkey second factor'
---

# What is the "Password + Passkey" method for authentication?

## What is the "Password + Passkey" Method for Authentication?

The "Password + Passkey" method combines traditional password-based login with passkeys as
a second authentication factor, providing enhanced security while supporting a gradual
transition to [passkey adoption](https://www.corbado.com/blog/passkey-adoption-business-case).

### User Experience

1. The user begins by entering their password as usual.
2. After successful password entry:
    - If a passkey is available, the user is prompted to authenticate using biometrics
      (e.g., fingerprint or face recognition) or a PIN.
    - If no passkey is available, the user falls back to other MFA methods, such as SMS
      OTPs.
3. Users are encouraged to [create a passkey](https://www.corbado.com/blog/passkey-creation-best-practices)
   during this process to streamline future logins.

### Benefits

- **Enhanced Security:** Maintains
  [two-factor authentication](https://www.corbado.com/blog/passkeys-vs-2fa-security) with a
  [phishing](https://www.corbado.com/glossary/phishing)-resistant second factor.
- **Ease of Transition:** Allows users to continue using passwords, easing the
  [transition to passkeys](https://www.corbado.com/blog/user-transition-passkeys-expert-strategies).
- **Flexibility for Legacy Systems:** Supports systems that cannot fully transition to
  passkeys immediately.

### Challenges

- **Increased Steps:** Users must first enter a password before using a passkey, which may
  introduce friction.
- **Limited Passkey Functionality:** Advanced
  [passkey features](https://www.corbado.com/blog/social-logins-pre-filled-passkeys-customization) like
  [One-Tap](https://docs.corbado.com/corbado-connect/features/one-tap-login) Login or
  [Conditional UI](https://www.corbado.com/glossary/conditional-ui) cannot be fully utilized when passwords are
  required.

### Real-World Example

Amazon implements this method, requiring a passkey as an additional step after password
entry to enhance security while maintaining compatibility with existing systems.

This approach is ideal for organizations seeking a secure, stepwise integration of
passkeys while maintaining familiarity for users accustomed to passwords.

## Read the full article