How Expo's Passkey Sign-In Enhances Security for White-Label Food Delivery Apps

What Changed

Expo has introduced a new authentication method: sign-in with passkeys. This update allows users to add passkeys to their Expo accounts, enabling them to sign in more securely than with traditional passwords and OTP combinations. Passkeys serve as a primary authentication factor, eliminating the need for a second step for users with two-factor authentication (2FA) enabled. However, passkeys are not available for users who utilize single sign-on (SSO) through their organization's identity provider. For more details, visit the Expo changelog.

Who is Affected

This update primarily affects the workflows of customers, drivers, and restaurant partners using the Good Food Pro apps, as well as the administrators managing these platforms. The integration of passkeys can streamline the login process for these users, enhancing security and potentially reducing friction during sign-ins. The EAS Build process may also be influenced if the authentication method is integrated into the build pipeline for white-label binaries.

Marketplace Impact

The introduction of passkey sign-in can have several implications for a food delivery marketplace:

• Live Tracking and Maps: Enhanced security measures can reassure users that their personal data is protected, which is crucial for features like live courier tracking and maps where sensitive location data is involved.
• EAS Builds: When building white-label apps, incorporating passkey authentication can add a layer of security that appeals to privacy-conscious clients. This can be a selling point for agencies pitching the platform to potential buyers.
• Kitchen Display Systems (KDS): Restaurant partners using KDS can benefit from quicker and more secure logins, ensuring that order management remains efficient and secure.
• Onboarding: Simplified authentication can enhance the onboarding experience for new users, reducing drop-off rates and improving user retention.
• Over-the-Air (OTA) Updates: With secure authentication, OTA updates can be managed more confidently, knowing that user accounts are less vulnerable to unauthorized access.

For more insights on how these features integrate with the Good Food Pro platform, explore our features page.

Action Checklist

1. Evaluate the current authentication methods in your Good Food Pro deployment and identify areas where passkeys could enhance security.
2. Consult with your development team to integrate passkey support into the customer, driver, and restaurant apps.
3. Update your documentation to include instructions for users on how to set up and use passkeys effectively.
4. Test the new authentication method in a staging environment to ensure compatibility with existing systems.
5. Communicate the benefits of passkey sign-in to your marketplace users, highlighting the improved security and user experience.
6. Monitor user feedback and adjust the implementation as necessary to enhance the overall user experience.

For detailed guidance on implementing these changes, refer to our documentation.

When to Ignore

If your marketplace primarily relies on SSO for authentication, this update may not be relevant, as passkeys are not available for SSO users. Additionally, if your current authentication methods are already meeting security and user experience expectations, you may choose to forego this update until further evaluation or demand arises.

Consider exploring our blog for more insights on optimizing your white-label food delivery platform.