Strengthening PBX security: Passkeys and the Vodia Phone System
Published on:
October 21, 2025
Vodia PBX strengthens security with passkeys, giving users and administrators a secure, passwordless login method that eliminates many vulnerabilities tied to traditional credentials. Passkeys use public key cryptography, storing the private key on the user’s device and the public key on the server, making them resistant to phishing and credential theft. By reducing reliance on passwords, Vodia minimizes the attack surface in cloud environments and makes authentication simpler and more secure, while ensuring a smoother, faster login experience for all users.
Vodia has supported the use of passkeys since 2023, making it possible to log in securely without relying solely on passwords. With Version 69 of Vodia’s best-in-class phone system, passkeys are supported at both the user and administrator level. You no longer need to use passwords with the Vodia PBX, though you may continue to do so if you wish.
Users can also receive a secure login link via email that expires after a predetermined period of time, providing another simple and secure way to access the system.
Security Threats across the Digital Landscape
The current decade has seen a steady increase in cyberattacks, including state-sponsored campaigns and the continued rise of “bad actors” in the digital sphere. While passwords remain a core component of online security, they are also one of the easiest targets for attackers. More robust methods such as two-step verification, security keys, and passkeys provide stronger protection against these threats.
You Need More than Just Passwords
Passwords have been in use for more than half a century and have long served as the “workhorses” of cybersecurity. In today’s IT environment, however, they can’t be the only line of defense - this applies to both individual users and organizations.
Because most passwords are created by users, they are often predictable, reused, or weak. They’re also particularly vulnerable to phishing attacks, which exploit human error. According to a recent Verizon Data Breach Investigations Report:
The human element continues to be a key driver of 82% of breaches, and this pattern captures a large percentage of those breaches. Additionally, malware and stolen credentials provide a great second step after a social attack gets the actor in the door, which emphasizes the importance of having a strong security awareness program.
What Passkeys Are and How Passkeys Strengthen Security
Passkeys are a passwordless authentication method that uses public key cryptography. A private key is stored securely on the client side and a public key on the server side - this means the private login keys can’t be accessed, even if the server is hacked.
Once a user logs in, the website checks whether or not the public key matches up with the private key; for verification, the user is asked to unlock their device using a fingerprint, face scan, or screen lock.
Passkeys offer strong protection against phishing and credential theft. They are stored on individual devices, can’t be guessed or reused, and provide a simple, secure login experience.
Why Passkeys Matter for PBX
Passkeys are particularly effective at reducing risk in cloud environments with multiple users. By eliminating weak passwords, they strengthen security and minimize the attack surface. Vodia introduced passkeys in 2023, shortly after Google, and we remain convinced they are the most secure login method available today. We encourage replacing passwords with passkeys wherever possible.
Passkeys Keep It Secure and Simple
What excites us most at Vodia is how passkeys make our PBX both more secure and easier to use. There’s nothing to memorize, no passwords to reset, and no credentials to steal. Over time, we expect more and more customers will switch to passkeys for their ease of use and security benefits.
Find out more about how passkeys are the most secure, simplest way to log in to our feature-rich PBX, the industry’s most innovative. Contact us at sales@vodia.com, or call +1 (617) 861-3490 (United States), +61 2 7201 0788 (APAC), or +49 30 555 78749 (Europe).
The FCC has reversed its January 2025 cybersecurity ruling for telecom providers, eliminating the proposed national standards and annual certification requirements under CALEA. The change reduces formal compliance obligations, but it does not lessen the risks facing carriers as cyberattacks grow more frequent and more sophisticated. The reversal underscores how essential it is for service providers to rely on platforms built with strong inherent protections.
The V70 preview build is now available for testing, giving partners and administrators an early opportunity to explore the updated administrator interface, improved performance from multicore media processing, cross-tenant BLF, snapshot creation and restoration, centralized remote provisioning, and updated Debian and CentOS builds. This pre-release version is intended for evaluation and feedback while we finalize the production-ready release for early 2026.
Vodia delivers a secure, scalable communication system built for HIPAA-aligned operations, AI-driven automation, and seamless integrations with tools like CallSmart and Cliniko. It streamlines scheduling, missed-call recovery, and daily workflows while supporting compliant faxing, telemedicine, and telehealth. From clinics to long-term care, Vodia strengthens staff coordination, protects patient data, and improves overall patient experience through a unified, reliable communications platform.