Getting Started with Visa Payment Passkey

Introduction to Visa Payment Passkey

Visa Payment Passkey (VPP) is a FIDO-based authentication solution designed to enhance security and user experience for e-commerce payments. It enables device-bound authentication across all Visa card-not-present (CNP) acceptance solutions with a single registration, allowing consumers to authenticate payments using biometrics or other secure methods without relying on passwords or OTPs

 

Visa Payment Passkey Ecosystem Participants

Merchants and Payment Service Providers

As a merchant or payment service provider, you can implement VPP APIs to enable cardholders to create and authenticate using their Visa Payment Passkey.

Issuers

As an Issuer, you can implement the suite of VPP APIs through Visa ID & Credential. 

        

 

Key Terms

These are some of the key terms used throughout this implementation guide. For a more complete list, please view the Visa Payment Passkey Service Program Guide.

Fast Identity Online (FIDO)

The authentication standard which leverages public key cryptography to authenticate users online using on-device biometric screen unlock or other device authentication method (e.g., PIN, pattern).

Passkey

A FIDO Credential generated using WebAuthn API that may be synced to other FIDO Authenticators linked to a user’s keychain/cloud account.

Relying Party (RP)

Website of entity that uses the FIDO protocol to directly authenticate users. During a FIDO flow, the party that is requesting the user to be authenticated. The FIDO Credential for the user is registered in the Relying Party’s domain.

WebAuthn

Web Authentication API is the browser spec that enables creation of public-key-based credentials by web applications.