myVicRoads iOS & Android Apps launch native Passkeys

1. myVicRoads App launches native Passkeys for iOS & Android#

With over 1 million passkeys issued and an 80% mobile activation rate on mobile web, VicRoads' passkey initiative has already proven to be a huge success. Consequently, the integration of passkey solution into the myVicRoads iOS and Android apps has been successfully achieved. This extension addresses critical security and user experience challenges by bringing phishing-resistant, biometric logins to Victorians' fingertips.

2. Why native Passkeys matter for Victorians#

In a time of increasing password fatigue and the rising threat of SMS phishing in Australia, securing high-value digital credentials like digital driver licences is of utmost importance, especially on mobile devices. Traditional authentication methods often introduce friction and are vulnerable to phishing attacks.

By integrating passkeys directly into the native myVicRoads app, VicRoads provides a seamless, secure and user-friendly authentication experience.

This omnichannel approach ensures that a passkey created on the web works instantly on the native mobile app, a key driver for user adoption.

3. Key Highlights of the native App Passkey Deployment#

The VicRoads implementation showcases the power and simplicity of Corbado's native passkey integration:

1. Fully Native Experience: The solution is built directly on native iOS AuthenticationServices framework and Android Credential Manager APIs, avoiding WebViews for a truly seamless and secure user experience.
2. Co-existence of Local Biometrics: The integration augments existing local device biometric protection piggy-backing on the passkey flow for effortless authentication.
3. Rapid Time-to-Value: The use of Corbado's native iOS and Android SDKs reduced the integration time from months to weeks, allowing for a swift rollout.

For more technical details, see our documentation on native SDKs.

4. UX Walk-through: iOS vs. Android#

The user experience is designed to be intuitive and flexible across both major mobile platforms.

4.1 myVicRoads Passkey Login#

In the following, you'll see the different ways how VicRoads customers can leverage passkeys for their login. Moreover, there is still a fallback to password and OTP/TOTP authentication.

4.1.1 iOS Login Modes#

Video: myVicRoads iOS Passkeys Login Flow

On iOS, there are three ways how VicRoads customers can sign into the app with passkeys.

1. Overlay: An operating system modal overlay that lets the user select the right passkey straight after loading of the login screen

2. Credential UI: An autofill suggestion to use a stored passkey on top of the keyboard

3. Text-field: After submission of the identifier, the passkey login starts

4.1.2 Android Login Modes#

Video: myVicRoads Android Passkey Login Flow

On Android, there is no Conditional UI available in native apps, so that there are are only two ways to sign into the app with passkeys.

1. Overlay: The Credential Manager bottom sheet provides a consistent and smooth login flow

2. Text-field: After identifier submissions, the passkey login flow begins

4.2 myVicRoads Passkey Append#

Passkeys can be appended to the customer account, either in the conventional login on the Passkey Append screen or in the account settings.

4.2.1 iOS Passkey Append#

On their first login with a traditional username and password, users are prompted for passkey creation. This simple but powerful feature significantly reduces user drop-off.

Video: myVicRoads iOS Create Passkey Flow

4.2.2 Android Passkey Append#

After a successful login with their username and password, a prompt from the Android Credential Manager appears, asking the user to create a passkey. This process is quick, intuitive, and helps drive passkey adoption without interrupting the user's journey.

Video: myVicRoads Android Create Passkey Flow

4.3 myVicRoads Passkey Management#

Users have full control over their passkeys, with the ability to view a list of their passkeys, add a secondary device, and delete passkeys as needed, all from within the myVicRoads app settings.

4.3.1 iOS Passkey Management#

Within the app's passkey settings, iOS users can view their active passkeys. A simple and intuitive interface allows them to add new passkeys on other credential managers or remove existing ones.

4.3.2 Android Passkey Management#

Similarly, Android users can manage their passkeys directly within the myVicRoads app. The passkey settings provide a clear overview of all created passkeys and users can easily add or revoke them.

5. Corbado's Enterprise Passkey Platform#

Corbado's platform provides the tools necessary for a successful enterprise-grade passkey implementation:

• Detailed Analytics: Gain insights into the usage of native app passkeys.
• Gradual Rollout: Seamlessly manage the rollout of passkeys to your user base.
• Funnel Analysis: Identify login patterns and optimize the user journey.
• Adoption Improvement: Utilize data to improve overall passkey adoption.

6. VicRoads Passkeys: Results to Date#

The results of the VicRoads integration (for the web launch) speak for themselves:

• Over 1 million passkeys were created in the first few weeks.
• An 80% mobile activation rate, far exceeding the industry average of approximately 40%.

More details on this success story can be found in the FIDO Alliance case study.

7. See it in Action#

Download the myVicRoads app from the App Store or Google Play Store to experience native passkeys firsthand.

Frequently Asked Questions#

How does passkey login work differently on iOS versus Android in the myVicRoads app?#

iOS supports three login modes: an OS modal overlay, a Credential UI autofill suggestion and a text-field flow. Android supports only two modes, overlay via the Credential Manager bottom sheet and text-field, because Conditional UI is not available in native Android apps.

How does the myVicRoads app prompt existing password users to adopt passkeys?#

On first login with a username and password, users are prompted to create a passkey through a passkey append flow. On Android, the Credential Manager displays this prompt after a successful password login, driving adoption without interrupting the user journey.

What passkey management capabilities does the myVicRoads app provide to users?#

Users can view a list of active passkeys, add passkeys on secondary devices and delete existing passkeys directly within the myVicRoads app settings. Both iOS and Android provide dedicated passkey management screens, giving users full control over their credentials from within the app.

What enterprise tooling does Corbado offer to manage a large-scale native passkey rollout?#

Corbado's platform provides detailed analytics on native app passkey usage, funnel analysis to identify login patterns and gradual rollout controls to manage deployment progressively. These tools enable product teams to measure and improve passkey adoption across a large user base.