Editorial

Strengthening PBX security: Passkeys and the Vodia Phone System

Published on:

October 21, 2025

Vodia PBX strengthens security with passkeys, giving users and administrators a secure, passwordless login method that eliminates many vulnerabilities tied to traditional credentials. Passkeys use public key cryptography, storing the private key on the user’s device and the public key on the server, making them resistant to phishing and credential theft. By reducing reliance on passwords, Vodia minimizes the attack surface in cloud environments and makes authentication simpler and more secure, while ensuring a smoother, faster login experience for all users.

Vodia has supported the use of passkeys since 2023, making it possible to log in securely without relying solely on passwords. With Version 69 of Vodia’s best-in-class phone system, passkeys are supported at both the user and administrator level. You no longer need to use passwords with the Vodia PBX, though you may continue to do so if you wish.

Users can also receive a secure login link via email that expires after a predetermined period of time, providing another simple and secure way to access the system.

Security Threats across the Digital Landscape

The current decade has seen a steady increase in cyberattacks, including state-sponsored campaigns and the continued rise of “bad actors” in the digital sphere. While passwords remain a core component of online security, they are also one of the easiest targets for attackers. More robust methods such as two-step verification, security keys, and passkeys provide stronger protection against these threats.

You Need More than Just Passwords

Passwords have been in use for more than half a century and have long served as the “workhorses” of cybersecurity. In today’s IT environment, however, they can’t be the only line of defense - this applies to both individual users and organizations. 

Because most passwords are created by users, they are often predictable, reused, or weak. They’re also particularly vulnerable to phishing attacks, which exploit human error. According to a recent Verizon Data Breach Investigations Report:

The human element continues to be a key driver of 82% of breaches, and this pattern captures a large percentage of those breaches. Additionally, malware and stolen credentials provide a great second step after a social attack gets the actor in the door, which emphasizes the importance of having a strong security awareness program.

What Passkeys Are and How Passkeys Strengthen Security

Passkeys are a passwordless authentication method that uses public key cryptography. A private key is stored securely on the client side and a public key on the server side - this means the private login keys can’t be accessed, even if the server is hacked.

Once a user logs in, the website checks whether or not the public key matches up with the private key; for verification, the user is asked to unlock their device using a fingerprint, face scan, or screen lock.

Passkeys offer strong protection against phishing and credential theft. They are stored on individual devices, can’t be guessed or reused, and provide a simple, secure login experience.

Weak passwords are highly vulnerable to phishing attacks and credential theft.

Why Passkeys Matter for PBX

Passkeys are particularly effective at reducing risk in cloud environments with multiple users. By eliminating weak passwords, they strengthen security and minimize the attack surface. Vodia introduced passkeys in 2023, shortly after Google, and we remain convinced they are the most secure login method available today. We encourage replacing passwords with passkeys wherever possible.

Passkeys Keep It Secure and Simple

What excites us most at Vodia is how passkeys make our PBX both more secure and easier to use. There’s nothing to memorize, no passwords to reset, and no credentials to steal. Over time, we expect more and more customers will switch to passkeys for their ease of use and security benefits.

Documentation is available in the Vodia PBX passkey integration guide.

Find out more about how passkeys are the most secure, simplest way to log in to our feature-rich PBX, the industry’s most innovative. Contact us at sales@vodia.com, or call +1 (617) 861-3490 (United States), +61 2 7201 0788 (APAC), or +49 30 555 78749 (Europe).

Latest Articles

View All

The World of Vodia: One Extension, Every Way You Work

Your Vodia extension is no longer tied to a single device or location. Native iOS and Android apps, the browser-based User Portal, PWA support, Vodia Hub and click-to-dial extensions provide different ways to connect with the same Vodia PBX. Make and receive business calls from your smartphone, manage communication from your browser, control calls from the Windows desktop or dial numbers directly from the applications and webpages you already use. Wherever work takes place, Vodia provides an experience designed for the device and workflow at hand.

August 20, 2026

From Check-In to Check-Out: Two Years of the Vodia-Cloudbeds Integration

The Vodia-Cloudbeds integration connects hotel communications with essential property-management workflows. From check-in to check-out, it automatically enables and personalizes room extensions, applies guest calling permissions, posts eligible call charges to Cloudbeds and resets extension data after each stay. Two years on, the integration continues Vodia’s long-standing work in hospitality, helping hotel teams reduce manual administration, protect guest information and keep telephone services synchronized with their daily operations.

August 18, 2026

The Vodia-Jitsi Meet Integration: Some Thoughts on Content Privacy

The Vodia integration with Jitsi Meet brings secure, self-hosted video conferencing directly into the Vodia PBX web portal. Users can launch meetings with a single click, while organizations maintain control over their infrastructure, meeting content and access. With JWT-based authentication, automatic room creation tied to extensions and controlled guest access, the integration offers a private, scalable alternative to conventional hosted video conferencing platforms while bringing voice and video together in one communications environment.

August 13, 2026