Added
Introducing Visa Payment Passkey Support
about 4 hours ago by Gleb Mendrul
🔐 Passwordless Authentication for Visa Secure
Say goodbye to OTPs. Apata now supports Visa Payment Passkeys (VPP) - biometric, phishing-resistant authentication for Visa Secure. 🎉
Passkeys bring the security of FIDO2 to card-not-present transactions, letting your cardholders authenticate with Face ID, fingerprint, or device PIN instead of one-time passwords. Faster checkouts, higher approval rates, and stronger security - all in one. 💪
⚙️ How It Works
- Registration - Merchants trigger a standard 3DS challenge to verify the cardholder, then Visa handles the FIDO attestation. Apata validates the request, confirms receipt, and responds accordingly. No crypto implementation needed on your side.
- Authentication - When a registered cardholder pays, their device signs the challenge with their biometric. Visa's Directory Server verifies the signature, and Apata receives the result via the FIDO Extension. Verified passkeys get frictionless approval automatically - no challenge required. ✅
- Exemption Handling - VPP-authenticated transactions automatically use the
AUTHN_VIA_VISA_PAYMENT_PASSKEYexemption, qualifying for DCAP liability shift benefits.
📌 Good to Know
Passkey registration requires a fully challenged authentication first - frictionless approval is not permitted during the registration step.
🚀 Enabled by Default
- VPP support is enabled by default - no configuration needed to get started
- Visa performs all FIDO heavy lifting, so there's zero crypto work on your side