A Payment Passkey is created by binding a tokenized payment credential to a trusted device and a verified cardholder using biometric authentication. This enables issuers to offer passwordless, phishing-resistant payment authentication while supporting frictionless digital commerce experiences across Card-on-File, Click to Pay and future AI-assisted commerce flows.
By replacing passwords and reducing reliance on OTPs, it helps issuers strengthen security, reduce fraud and deliver a simpler checkout experience.
Accelerating Visa and Mastercard Payment Passkey Adoption with Thales
Thales helps issuers implement Visa and Mastercard Payment Passkeys without the complexity of managing multiple scheme-specific integrations. Built on the D1 platform, the solution brings together tokenization, authentication and digital payment credentials within a unified framework. This allows issuers to accelerate adoption, simplify operations and support future payment experiences while reducing total cost of ownership.
Simplify Scheme Integrations
Reduce the complexity of managing multiple Visa and Mastercard integrations. Thales centralizes evolving scheme specifications, mandates, and authentication services behind a unified orchestration layer, reducing implementation and maintenance effort while supporting higher Token Assurance Levels.
Accelerate Agentic Commerce Readiness
Thales simplifies the adoption of new payment services through a unified digital orchestration platform. Instead of managing multiple integrations across tokenization, ID&V, Click to Pay, Payment Passkeys, and scheme-specific services, issuers integrate once and activate new capabilities through a common framework. This reduces implementation complexity, accelerates time-to-market, and helps issuers prepare for future payment experiences, including agentic commerce.
Unified credential foundation
Payment Passkeys are delivered through the same D1 platform that powers tokenization, authentication, and digital payment credentials. By reusing a common credential and orchestration framework, issuers reduce duplication across schemes, streamline operations, and scale new services more efficiently.
Features
Payment Passkey creation
Thales D1 SDK enables the creation of Visa and Mastercard Payment Passkeys directly within the issuer banking app. By leveraging the issuer's existing SCA and biometric authentication processes, issuers can provide a trusted and secure enrollment experience for genuine cardholders.
Payment Passkeys lifecycle management
Through the D1 SDK and backend APIs, issuers and cardholders can create, view, rename, and delete Visa and Mastercard Payment Passkeys, providing full lifecycle management and visibility.
Use cases
Orchestrate Payment Passkeys
To stay ahead of rapid digital commerce shift, Issuers must be ready to orchestrate the Payment Passkeys. Enabling the creation and lifecycle management, issuers regain ownership over how Payment Passkeys are activated, governed and scaled across their card portfolio directly in their banking app. It helps ensure that Payment Passkeys are created by genuine cardholders in a trusted banking environment, while giving issuers greater control over credential lifecycle, device trust and token governance.
With D1, issuers can manage Visa and Mastercard Payment Passkeys through one orchestration platform, gaining the visibility and control needed to operate the service consistently across schemes, cards and devices.
Issuer Verification and Device Binding
The unified D1 SDK supports Visa CTF and Mastercard MDES ID&V services to verify cardholders, perform secure device binding, and enable Payment Passkey enrollment during merchant checkout.
Last updated
Was this helpful?