Passkeys - offboarding

Moving from Passkeys to Passwords: Enhancing Security and User Experience

At Padre, we’re always striving to strike the right balance between security and user experience. While passkeys provide a robust layer of protection, we found that they introduced too much friction for our users, complicating what should be a smooth interaction with our platform.

After evaluating feedback, we decided to move away from passkeys in favor of passwords.

Why the Change?

Passkeys offer great security, but many users found them inconvenient and confusing to use. To simplify the experience, we’ve moved towards a password-based approach for securing your account. For some time now, all new users have been required to set a password rather than using passkeys.

This password is more than just a method to log in—it’s essential for protecting your crypto assets. We use your password to encrypt access keys to your private keys, which are stored securely with Turnkey, our private key infrastructure provider.

Why do I need a password at all? I already need to sign in, right?

Your password plays a vital role in securing your private keys. Here’s how:

• Encryption: Your password is used to encrypt access keys, ensuring that even if someone gains access to your account, they can't take any actions with your private keys without knowing the password. Knowing password is also not enough - it's useless unless you are signed in.

• Privacy: Your password is never stored or accessible by Padre team. This means your security is in your hands, adding an extra layer of protection that only you control.

If you have any further questions or want to dive deeper into the specifics, feel free to reach out to Padre team.