What's new in LoginID 25.X?
LoginID now uses two release streams:
- Active (25.x) – fast-moving feature releases
- Stable (2.x) – enterprise maintenance releases
25.10.1
Transaction confirmation improvements
Transaction confirmation flows now support usernameless authentication scenarios.
- Confirm transactions using passkeys without requiring a username lookup step.
- Available across LoginID transaction confirmation workflows.
Android Key Attestation support
LoginID now supports Android Key Attestation during passkey creation.
- Enables stronger device authenticity verification for Android devices.
- Provides additional attestation signals for security-sensitive deployments.
Improved interoperability and platform reliability
Several platform updates improve standards compliance and operational resilience.
- JWTs now include a
kidheader for improved JWKS compatibility. - JWKS endpoints now expose
key_opsmetadata for broader standards compliance. - Improved token verification and migration handling for
PasskeyIDidentity integrations.
25.10.0
Introducing PasskeyID: Identity-aware passkeys
PasskeyID adds identity verification to passkey enrollment, enabling passkeys to be linked with verifiable identity assurance. Identity is verified during passkey creation and recorded as an immutable audit event associated with the credential.
Key capabilities:
- No PII storage. Identity data is verified, hashed, and discarded.
- Cryptographically signed audit records link to passkeys.
- Provider-based or webhook-based identity verification models.
- Pluggable identity provider framework with initial support for Prove (Silent Network Authentication).
PasskeyID works transparently with existing passkey authentication flows and is currently supported in LoginID Web MFA SDK authentication flow.
Go to PasskeyIDNative Passkey Autofill for Android and iOS SDKs
Android and iOS SDKs now support platform-native passkey autofill to simplify authentication and reduce friction.
- Android integration with Google Credential Manager autofill.
- iOS integration with Apple's native passkey autofill.
- Automatic authentication flow invocation anchored to login UI elements.
WebAuthn Signal API support in WebSDK3
WebSDK3 now integrates with the WebAuthn Signal API to synchronize passkeys between authenticators and LoginID's FIDO2 service.
- Updates triggered during authentication, passkey deletion, and passkey listing.
- Helps remove revoked or outdated passkeys from a user's authenticator.
- No extra setup needed.
Transaction payload updates within active sessions
LoginID's FIDO2 service now allow transaction payloads to be updated during an active session.
- Supports dynamic transaction changes without restarting flows.
- Available via a new endpoint.
- Included in Web and iOS Checkout SDK passkey checkout flows.