Discover how banks in the US, Australia & Europe adopt passkeys for passwordless banking. Learn how passkeys banking improves security & reduces fraud.
Vincent
Created: January 27, 2025
Updated: March 25, 2026


Want to learn how top banks deploy passkeys? Get our +90-page Banking Passkeys Report (incl. ROI insights). Trusted by JPMC, UBS & QNB.
Passkeys in banking transform how users access financial accounts securely without passwords (sometimes they also replace the current existing second factor). In the USA, Australia and Europe, the first banks are embracing passkeys to reduce fraud and enhance security. This article covers which banks support passkeys and why passkeys are the future of online banking authentication.
Subscribe to our Passkeys Substack for the latest news.
Passkeys are a secure, passwordless authentication method based on FIDO2 and WebAuthn standards. They provide a faster and safer way for users to access their bank accounts by replacing passwords with biometric authentication. Some banks and financial institutions that currently support passkeys include Revolut, UBank, Armstrong Bank, First Financial Bank, Truist Bank, Chime, Wells Fargo, Capital One, Chase, AOD Federal Credit Union, PenFed Credit Union, JetStream Federal Credit Union, Certified Federal Credit Union, Cabrillo Credit Union, Nuvision Credit Union, Indiana Members Credit Union, Evergreen Credit Union, Dow Credit Union, People Driven Credit Union, SharePoint Credit Union and Finom (more a fintech than an own bank). These institutions are leveraging passkeys to enhance security, reduce fraud and improve user experience.
Banks are adopting passkeys to address growing cybersecurity threats and customer demands for seamless digital experiences. Traditional authentication methods, such as passwords and SMS-based 2FA, are vulnerable to phishing, SIM-swapping attacks and offer poor user experience. Passkeys solve these issues by leveraging FIDO2 / WebAuthn standards, which use public-private key cryptography.
+70-page Enterprise Passkey Whitepaper:
Learn how leaders get +80% passkey adoption. Trusted by Rakuten, Klarna & Oracle
In the following, you'll see an overview of which banks use passkeys to protect their users.
| Bank | Region | Passkey Status |
|---|---|---|
| Citibank | USA | not yet available |
| Chime | USA | Fully Implemented |
| Chase | USA | Fully Implemented |
| DCU | USA | Fully Implemented |
| Fidelity | USA | not yet available |
| Bank of America | USA | U2F Security Key Support |
| PNC Bank | USA | not yet available |
| U.S. Bank | USA | Fully Implemented |
| Wells Fargo | USA | Fully Implemented |
| Capital One | USA | Fully Implemented |
| Armstrong Bank | USA | Fully Implemented |
| First Financial Bank | USA | Fully Implemented |
| Citizens Bank | USA | not yet available |
| Truist Bank | USA | Fully Implemented |
| PenFed Credit Union | USA | Fully Implemented |
| JetStream Federal Credit Union | USA | Fully Implemented |
| Certified Federal Credit Union | USA | Fully Implemented |
| Cabrillo Credit Union | USA | Fully Implemented |
| Nuvision Credit Union | USA | Fully Implemented |
| Indiana Members Credit Union | USA | Fully Implemented |
| Evergreen Credit Union | USA | Fully Implemented |
| Dow Credit Union | USA | Fully Implemented |
| People Driven Credit Union | USA | Fully Implemented |
| SharePoint Credit Union | USA | Fully Implemented |
| AOD Federal Credit Union | USA | Fully Implemented |
| Commonwealth Bank (CommBank) | Australia | In Development |
| ANZ (ANZ Plus) | Australia | In Development (Launch: mid-2025) |
| NAB | Australia | Rollout in 2025 |
| Westpac | Australia | not yet available |
| Ubank | Australia | Fully Implemented |
| Royal Bank of Canada (RBC) | Canada | not yet available |
| Toronto-Dominion Bank (TD) | Canada | not yet available |
| Scotiabank | Canada | not yet available |
| Bank of Montreal (BMO) | Canada | not yet available |
| CIBC | Canada | not yet available |
| National Bank of Canada | Canada | not yet available |
| EQ Bank | Canada | Fully Implemented |
| ATB Financial | Canada | Fully Implemented |
| HSBC | Europe | not yet available |
| Revolut | Europe | Limited Availability |
| Finom | Europe | Fully Implemented |
| ABANCA | Europe | Used for Transaction Authorization |
| Neobank (SBI Sumishin Net Bank) | Asia | Fully Implemented |
| Cathay Financial Holdings | Asia | Fully Implemented |
| Chinabank | Asia | Fully Implemented |
Many leading banks in the USA are either already supporting passkeys or working towards their passkey implementation.
Want to find out how many people use passkeys?
As of today, Citibank does not yet support passkeys, but there are strong indications that Citi passkeys are in development. Like many major financial institutions, Citibank is exploring passkeys in their banking apps to provide a seamless, secure, and passwordless login experience for its customers.
To stay updated on Citibank passkeys, visit their official website or submit a request for passkey support, showing Citi that customers demand passwordless banking.
Yes, Chime supports passkeys as part of its Security Center in the Chime mobile app. According to Chime’s help documentation, you can set up a passkey to sign in using your device’s biometric or PIN unlock (like Face ID, Touch ID, fingerprint or device PIN) instead of typing a password, provided your device supports it.
To use passkeys on Chime:
If you don’t see passkey options, make sure you’re using the latest version of the Chime app and that your device’s screen lock is enabled.
Yes, Chase supports passkeys. In early 2026, they started to roll out passkeys to their retail customers after having offered biometric authentication in its iOS and Android apps for a while.
As a Board Level member of the FIDO Alliance, Chase has access to cutting-edge passwordless authentication technologies.
Yes! Digital Federal Credit Union (DCU) has fully implemented passkeys for its Digital Banking platform. Members can now log in securely using biometrics (such as Face ID or Touch ID) or a device PIN, without needing to enter a password or one-time code. Passkeys can be enabled in the Login and Security settings by selecting Manage Multi-Factor Authentication and adding a passkey on a supported device.
You can read DCU’s official guidance on passkeys here.
At this time, Fidelity Investments does not offer passkeys. However, as security concerns grow, Fidelity passkeys are likely on their roadmap. Fidelity is known for its robust security measures, and passkeys in their financial apps align with the push toward phishing-resistant authentication.
Customers interested in Fidelity passkeys can visit their contact page and request support, helping signal demand for passwordless banking.
Bank of America passkeys are partially available as U2F authentication, which allows customers to use FIDO2-certified security keys as a second factor rather than a true passwordless login. More details can be found on Bank of America’s security page.
As a Board Level member of the FIDO Alliance, Bank of America is actively exploring passkeys in banking, and full passkey login support may be on the horizon.
PNC Bank has taken significant steps towards passwordless authentication. While PNC passkeys are not fully implemented yet, PNC is leveraging FIDO standards to enhance security. Their multi-factor authentication strategy integrates device-based authentication, reducing reliance on passwords and SMS OTPs.
PNC Bank is a Board Level member of the FIDO Alliance, meaning they are well-positioned to deploy passkeys banking solutions in the future.
We recommend to read this case study from PNC on FIDO authentication on the FIDO Alliance website.
Yes, since November 2025, U.S. Bank offers passkeys for customer authentication. This way they can protect their customers from phishing and other credential-related fraud.
As a FIDO Alliance Board Level member, U.S. Bank has access to the latest passkey adoption trends and can influence the development of passkeys.
Yes, Wells Fargo supports passkeys. Customers can sign in using biometrics (Face ID, Touch ID, fingerprint) or a device PIN instead of a password. Passkeys are available on the Wells Fargo mobile app (iOS 16+ / Android 14+) and on the website via supported browsers (Chrome 109+, Firefox 122+, Edge 109+, Safari). Passkeys are stored in your device's cloud-based password manager and work across devices sharing the same Apple ID or Google Account.
For setup details, see Wells Fargo's passkey FAQ.
As a FIDO Alliance Board Level member, Wells Fargo is one of the largest US banks to fully support passkeys for secure banking.
Yes, Capital One supports passkeys. Eligible customers can create a passkey during sign-in or via their security settings. Passkeys let you sign in using biometric authentication (facial recognition or fingerprint) or your device PIN. Each passkey consists of a public key shared with Capital One and a private key stored on your device, making it phishing-resistant.
For setup details, see Capital One’s passkey guide.
As a Sponsor Level FIDO Alliance member, Capital One is one of the largest US banks to fully support passkeys banking.
Yes, Armstrong Bank supports passkeys to offer a passwordless login to their customers.
Yes, First Financial Bank supports passkeys to offer a passwordless login to their customers.
As of today, Citizens Bank does not yet support passkeys. Citizens Bank currently offers biometric login (fingerprint and Face ID / Touch ID) in its mobile app, but these are device-level biometrics rather than FIDO2-based passkeys. Traditional username / password authentication with optional SMS or email-based 2FA remains the primary login method.
Customers interested in Citizens Bank passkeys can contact their support team and request passwordless authentication support to signal demand.
Yes, Truist Bank has implemented passkeys on its online banking platform. The Truist web login at bank.truist.com explicitly offers a "Sign in with passkey" option alongside the traditional password sign-in, as well as an "Enable passkey / Learn more" flow and a QR-code sign-in option for cross-device authentication.
While Truist has not yet published a formal public announcement or marketing campaign around passkeys, the feature is live and customer-facing on their production login surfaces.
Yes, PenFed Credit Union supports passkeys for its online banking platform. Members can log in using a passkey instead of a traditional password by selecting the "Log in with Passkey" option on the PenFed member login page. To set up a passkey, members can visit the Security Center in their account settings and follow the enrollment prompts. PenFed's passkey implementation supports biometric authentication (fingerprint, face recognition) and device PINs for a seamless, phishing-resistant login experience.
Yes, JetStream Federal Credit Union supports passkeys in its digital banking platform. Members can sign in using Face ID, fingerprint, or a device PIN instead of typing a password. To use passkeys, members need to update their mobile app to version 5.12 or later, log in with their username and password, and select "Sign in with passkey" to register their device. Desktop users can authenticate via a mobile device or a USB security key.
For more details, see JetStream's official passkey announcement.
Yes, Certified Federal Credit Union supports passkeys for mobile and online banking. Members can sign in using Face ID, fingerprint, or a device PIN without needing a password. The credit union frames passkeys as a "password-free" login method, making authentication faster and more secure.
For more details, visit Certified Federal Credit Union's Better Banking page.
Yes, Cabrillo Credit Union supports passkeys as a primary MFA method within its Digital Banking security settings. Members can select passkeys as their MFA option for all multi-factor authentication challenges, providing a seamless and phishing-resistant authentication experience. This implementation positions passkeys explicitly as an MFA method rather than solely as a password replacement.
For more details, visit Cabrillo Credit Union's security page.
Yes, Nuvision Credit Union supports passkeys for its digital banking platform. Members can create a passkey on their device and use biometric authentication (fingerprint or face recognition) for future logins and transaction approvals. The setup flow guides members through storing the passkey using either biometrics or a unique device password.
For more details, see Nuvision's digital banking instructions.
Yes, Indiana Members Credit Union (IMCU) supports passkeys as one of several security options in its digital banking platform. Members can register a passkey for MFA in their Security settings and use it for authentication during login, password resets and other security flows.
For more details, visit IMCU's digital banking FAQ.
Yes, Evergreen Credit Union supports passkeys as part of its refreshed online banking and mobile app experience. The credit union's official announcement includes passkey login capability alongside other digital banking improvements, with an FAQ defining passkeys as a non-password authentication method.
For more details, see Evergreen Credit Union's announcement.
Yes, Dow Credit Union supports passkeys and FIDO security keys as approved security access methods for online banking. Their disclosures explicitly reference WebAuthn/FIDO2 standards and note that FIDO security keys and biometric authentication are supported — making Dow Credit Union one of the most standards-explicit credit union implementations.
For more details, see Dow Credit Union's online banking disclosures.
Yes, People Driven Credit Union supports passkeys for mobile and online banking. Members who have set up a passkey can use it to sign in instead of entering a password, providing a faster and more secure login experience.
For more details, visit People Driven Credit Union's mobile banking page.
Yes, SharePoint Credit Union supports passkeys for both its mobile app and website. Passkeys work seamlessly across platforms and remain functional even if a member changes their password, providing a reliable and convenient authentication method.
For more details, see the SharePoint Credit Union app on the App Store.
Yes, AOD Federal Credit Union supports passkeys for its digital banking platform, enabling members to log in using biometric authentication or a device PIN instead of a password.
Australia is experiencing strong momentum in the adoption of passkeys banking, particularly among the Big Four banks. While many financial institutions are still in development phases, Ubank has taken the lead, becoming one of the first banks globally to fully embrace passkeys as a primary authentication method.
As of 2025, Commonwealth Bank passkeys are still in development, but the bank is actively working on integrating passwordless authentication for its customers. Commbank passkeys are expected to provide a phishing-resistant and seamless login experience, reducing reliance on passwords and SMS OTPs.
For updates on Commonwealth Bank passkeys, customers can visit CommBank’s website or submit a request to encourage the bank to accelerate its passkey adoption.
Yes! ANZ has officially announced the introduction of fully passwordless web banking for its digital bank, ANZ Plus, launching in mid-2025. Customers will have two secure authentication methods:
Maile Carnegie, ANZ's Group Executive for Australia Retail, emphasized the revolutionary impact of this change, highlighting increased ease of access, enhanced security against phishing and data breaches and overall improved customer experience.
ANZ Plus has rapidly grown to serve over one million customers since its 2022 launch, reinforcing ANZ’s strategic direction to transition fully to passwordless authentication by 2029, covering six million ANZ retail customers and an additional one million from Suncorp.
To track the latest developments on ANZ passkeys, customers can visit the bank’s official channels or request updates via their customer support portal.
Yes! NAB passkeys are officially coming to customers following the success of their digital-first challenger bank, Ubank, which fully adopted passkeys in 2024.
Key developments of passkeys at NAB:
We recommend to read the NAB’s official announcement on passkeys.
Currently, Westpac passkeys have not been announced or launched, but there are strong indications that the bank is preparing for passkeys banking implementation. As part of Australia’s Big Four banks, Westpac is expected to follow the other banks in rolling out passkeys.
Customers interested in Westpac passkeys can request updates via the bank’s official support channels to encourage faster adoption.
Yes! Ubank passkeys have been fully implemented since mid-2024, making it one of the first banks worldwide to go passkey-first.
Key highlights of Ubank passkeys:
*Ubank CEO, Philippa Watson, also added the following statement about passkeys: "As part of our digital banking strategy, we focus on delivering simple and secure digital experiences. We’re proud to be among a growing number of global organizations introducing passkeys to protect customers against fraud and scams."
Check out Ubank’s official statement on passkeys.
Canada is starting to see the adoption of passkeys in banking, with EQ Bank and ATB Financial leading the rollout. Major banks like RBC, TD, Scotiabank, BMO and CIBC have not yet rolled out passkeys but are expected to follow.
Currently, RBC passkeys are not available. RBC customers still use passwords and 2FA. As a major Canadian bank, RBC is expected to adopt passkeys in the future.
TD Bank does not yet support passkeys. Customers currently rely on traditional login methods. Support for passkeys is anticipated as the industry moves toward passwordless banking.
Scotiabank passkeys are not yet available. Scotiabank continues to use standard authentication methods but is likely to explore passkeys for enhanced security.
BMO has not yet rolled out passkeys. We expect BMO to evaluate passwordless authentication options like passkeys to improve customer security.
CIBC passkeys are not currently supported. CIBC uses traditional verification methods. Adoption of passkeys is expected in the near future.
National Bank of Canada does not offer passkeys at this time. Future implementation of passkeys is expected to align with industry trends.
Yes! EQ Bank has fully implemented passkeys to provide a faster, easier, and more secure login experience. Passkeys allow customers to log in without a password using their device’s built-in security, such as Face ID, Touch ID, or a device PIN.
Key highlights:
For more details, visit EQ Bank's passkey education center.
Yes! ATB Financial supports passkeys and biometric login for its ATB Personal, ATB Business, and ATB Prosper mobile apps.
Key benefits:
Learn more at ATB's passkey & biometric login page.
European banks and fintech companies are gradually adopting passkeys banking to enhance security and improve user authentication. While some banks have already launched passkeys, others are in the process of developing this technology.
As of 2025, HSBC passkeys are not yet available, but there are strong indications that HSBC is actively exploring passkeys banking to enhance customer security.
Like many large banks worldwide, HSBC is expected to integrate passkey authentication to replace traditional passwords.
HSBC is a Sponsor-level member of the FIDO Alliance, giving them access to the latest innovations in passkeys in banking.
Yes! Revolut passkeys are available in a limited capacity, making Revolut one of the first major European banks to introduce passwordless authentication.
Key highlights:
Check out our detailed analysis on Revolut passkeys for a full breakdown of their implementation.
Yes! Finom passkeys are available for secure logins from mobile devices in their web application.
Explore our full Finom passkeys analysis for insights into their authentication system.
Yes! ABANCA passkeys are used as a second factor for transaction authorization in their iOS and Android apps.
Key insights:
Check out ABANCA's slides on passkeys at the FIDO Alliance public seminar in Paris.
Asia is at the forefront of passkeys banking adoption, with both traditional banks and neobanks integrating passwordless authentication to enhance security and improve user experience.
Yes! Neobank passkeys are actively being used by Neobank (SBI Sumishin Net Bank), a leading digital bank in Japan.
Key highlights:
As a Sponsor-level FIDO Alliance member, Neobank has access to the latest innovations in passkeys banking, ensuring continuous improvements in passwordless authentication.
Yes! Cathay Financial Holdings passkeys are officially in use.
Key developments:
Yes! Chinabank became the first Philippine bank to launch FIDO2 passkey security for its My CBC app, allowing users to approve transactions using fingerprint, face recognition, or device unlock instead of SMS one-time passwords.
Key highlights:
First in the Philippines: Chinabank is the first bank in the Philippines to implement FIDO2 passkey authentication, positioning itself as a leader in digital banking security in the region.
Mandatory Rollout: Passkey activation was optional initially but became mandatory for all My CBC users after March 2026, signaling strong commitment to phishing-resistant authentication.
OTP Replacement: The implementation eliminates reliance on SMS OTPs for transaction approval, preventing stolen passwords, phishing scams, and SIM-based attacks.
Device-Local Security: Passkeys are stored locally on the user's device and cannot be intercepted, unlike traditional passwords or OTP codes.
For more details, see Chinabank's official announcement.
Some banks support hardware security keys, such as YubiKeys, as a phishing-resistant two-factor authentication (2FA) method. However, in most cases, YubiKeys are used as a second factor in combination with passwords.
Key insights:
As the industry moves towards passwordless banking, it is likely that passkeys will become the preferred method over physical security keys due to ease of use and device compatibility.
Banks worldwide are actively transitioning to passwordless authentication due to the rising risks of phishing, social engineering attacks and credential theft. With the increasing use of AI-powered phishing tactics, traditional passwords have become a major security vulnerability.
While banks aim to eliminate passwords, the transition will happen in phases:
For consumer banking, passkeys are the most scalable and user-friendly solution. Unlike hardware-based security keys, passkeys:
✅ Do not require additional hardware (e.g., YubiKeys).
✅ Are built into users’ existing devices (smartphones, laptops).
✅ Work seamlessly across platforms (iOS, Android, Windows).
✅ Provide a fast, frictionless login experience.
Given these advantages, consumer banking passwordless authentication is expected to become the industry standard, ensuring both security and convenience.
The adoption of passwordless authentication in business banking is slower compared to consumer banking. This is due to:
While fintech passkeys and enterprise passkeys are becoming more common in business banking, adoption is gradual compared to consumer banking.
For banks looking to implement passkeys, Corbado provides a Passkey Intelligence Layer that sits on top of your existing Identity Provider — no user migration required. Corbado helps banks bridge the gap between theoretical passkey benefits and production-grade deployment.
Corbado's Device Trust Dashboard gives banks real-time visibility into how their authentication methods map to PSD2's SCA factors across their entire user base. Banks can see exactly which SCA factor combination each method provides, actual success rates, and whether the method is phishing-resistant.
Device-bound passkeys achieve 99.1% success rates with 0% step-up requirements, while synced passkeys with cookie/session binding reach 98.4% — both with built-in phishing resistance. This lets banks demonstrate SCA compliance to regulators with concrete data rather than theoretical arguments.
Banks can define granular policies that control when passkeys can be created and when step-up authentication is required. Synced passkeys on new devices trigger step-up verification, device-bound passkeys on known devices are trusted without friction, and shared/kiosk devices can be blocked from passkey creation entirely.
This policy-driven approach means banks can start with conservative SCA interpretations and gradually relax controls as they build confidence — all through configuration changes, not code updates.
Corbado's Position on PSD2/SCA and Passkeys: Passkeys (both device-bound and synced) can be SCA-compliant. Each institution must own its SCA risk assessment, but the evidence is clear: passkeys inherently provide two SCA factors - possession (private key in hardware security module or cloud keychain) + inherence (biometric) or knowledge (PIN). The "possession" debate is nuanced but resolvable - the industry is landing in three approaches: (1) Passkeys as-is (e.g. Revolut, Finom) - inherence + possession via device with private key, (2) Passkeys + cookie/session binding (e.g. PayPal, Comdirect) - extra possession signal for conservative interpretation, (3) Cryptographic binding (DBSC/DPoP) - hardware-bound proof of possession, strongest guarantee. No single "correct" interpretation exists yet. An outcome-based approach to SCA is needed - focusing on demonstrable phishing resistance rather than rigid factor categorization. Dynamic linking remains a separate requirement for payments even with passkeys.
The financial industry is moving towards passwordless authentication as a standard security measure. Financial services passkeys provide:
As more banks integrate passkeys, customers will expect passwordless authentication to be the default standard. Stay ahead of the curve by adopting passkeys banking today!
Next Step: Ready to implement passkeys at your bank? Our +90-page Banking Passkeys Report is available.
Get the Report
Table of Contents
Related Articles