This authentication method relies on a cryptographic key pair which uses a private key and a public key. The public key is generated upon enrollment in the authentication service while the private key is stored on the user’s trusted device. This key is only accessible after the user provides a secure proof of identity, i.e. the second factor which is not a password in the case of Passwordless.