The Architecture of Grab's Auth System

Grab's new passwordless authentication system uses Passkeys based on the FIDO standard. Passkeys offer enhanced security and convenience by utilizing public-key cryptography, eliminating the need for passwords, and providing built-in multi-factor authentication. The implementation involves creating and authenticating passkeys using WebAuthn APIs, which interact with user devices for secure login. This method also significantly reduces the risk of phishing attacks and eliminates the need for companies to store sensitive credentials.