Editorial

Strengthening PBX security: Passkeys and the Vodia Phone System

Published on:

October 21, 2025

Vodia PBX strengthens security with passkeys, giving users and administrators a secure, passwordless login method that eliminates many vulnerabilities tied to traditional credentials. Passkeys use public key cryptography, storing the private key on the user’s device and the public key on the server, making them resistant to phishing and credential theft. By reducing reliance on passwords, Vodia minimizes the attack surface in cloud environments and makes authentication simpler and more secure, while ensuring a smoother, faster login experience for all users.

Vodia has supported the use of passkeys since 2023, making it possible to log in securely without relying solely on passwords. With Version 69 of Vodia’s best-in-class phone system, passkeys are supported at both the user and administrator level. You no longer need to use passwords with the Vodia PBX, though you may continue to do so if you wish.

Users can also receive a secure login link via email that expires after a predetermined period of time, providing another simple and secure way to access the system.

Security Threats across the Digital Landscape

The current decade has seen a steady increase in cyberattacks, including state-sponsored campaigns and the continued rise of “bad actors” in the digital sphere. While passwords remain a core component of online security, they are also one of the easiest targets for attackers. More robust methods such as two-step verification, security keys, and passkeys provide stronger protection against these threats.

You Need More than Just Passwords

Passwords have been in use for more than half a century and have long served as the “workhorses” of cybersecurity. In today’s IT environment, however, they can’t be the only line of defense - this applies to both individual users and organizations. 

Because most passwords are created by users, they are often predictable, reused, or weak. They’re also particularly vulnerable to phishing attacks, which exploit human error. According to a recent Verizon Data Breach Investigations Report:

The human element continues to be a key driver of 82% of breaches, and this pattern captures a large percentage of those breaches. Additionally, malware and stolen credentials provide a great second step after a social attack gets the actor in the door, which emphasizes the importance of having a strong security awareness program.

What Passkeys Are and How Passkeys Strengthen Security

Passkeys are a passwordless authentication method that uses public key cryptography. A private key is stored securely on the client side and a public key on the server side - this means the private login keys can’t be accessed, even if the server is hacked.

Once a user logs in, the website checks whether or not the public key matches up with the private key; for verification, the user is asked to unlock their device using a fingerprint, face scan, or screen lock.

Passkeys offer strong protection against phishing and credential theft. They are stored on individual devices, can’t be guessed or reused, and provide a simple, secure login experience.

Weak passwords are highly vulnerable to phishing attacks and credential theft.

Why Passkeys Matter for PBX

Passkeys are particularly effective at reducing risk in cloud environments with multiple users. By eliminating weak passwords, they strengthen security and minimize the attack surface. Vodia introduced passkeys in 2023, shortly after Google, and we remain convinced they are the most secure login method available today. We encourage replacing passwords with passkeys wherever possible.

Passkeys Keep It Secure and Simple

What excites us most at Vodia is how passkeys make our PBX both more secure and easier to use. There’s nothing to memorize, no passwords to reset, and no credentials to steal. Over time, we expect more and more customers will switch to passkeys for their ease of use and security benefits.

Documentation is available in the Vodia PBX passkey integration guide.

Find out more about how passkeys are the most secure, simplest way to log in to our feature-rich PBX, the industry’s most innovative. Contact us at sales@vodia.com, or call +1 (617) 861-3490 (United States), +61 2 7201 0788 (APAC), or +49 30 555 78749 (Europe).

Latest Articles

View All

Manually Provisioning a Cisco 3PCC Phone in the Vodia PBX

Vodia now supports provisioning for Cisco 3PCC phones, giving businesses and service providers a clearer way to connect compatible Cisco multiplatform IP phones to the Vodia PBX. Admins can add supported Cisco devices through Vodia Device Management, pair them with extensions, and configure provisioning settings through the phone’s web interface. This expands Vodia’s supported device ecosystem while helping customers continue using trusted Cisco IP phones within their existing business phone system.

July 9, 2026

Vodia Hub brings click-to-call and call control to every Windows workspace

Vodia Hub brings click to call and desktop call control to Windows, making it easier for users to place, answer, manage, and automate calls from the applications they already use every day. With system wide tel: link handling, inbound call screen pops, queue details, and automation support, Vodia Hub helps connect the Vodia PBX with Outlook, CRMs, browsers, documents, and other Windows tools. Users can keep working without manually copying phone numbers, opening the user portal, or switching between applications just to handle a call.

July 7, 2026

Desk phones, mobile apps, or both? Choosing the right setup for business calls

Desk phones and mobile apps both have a place in modern business communications. IP desk phones remain a strong choice for receptionists, support teams, customer service agents, and employees who handle a high volume of calls from a fixed location. Mobile apps, on the other hand, give remote, hybrid, and field-based users access to their business extension wherever they work. For many organizations, the best answer is not choosing one over the other, but using both through the same PBX environment so every user has the right calling tool for their role.

July 2, 2026