Passwordless authentication

A system comprising:

• a memory comprising instructions;
• and
• a processor configured to execute the instructions which, when executed, cause the processor to:
• install an application on a mobile device, wherein the application is received by the mobile device via a push notification service, wherein the application is configured to enable passwordless authentication to an ancillary device of the user;
• install a driver and a daemon on the ancillary device, wherein the driver and the daemon are received by the ancillary device via the push notification service;
• generate, at the mobile device, an encrypted key pair comprising an encrypted public key associated with a user of the mobile device;
• receive, at the mobile device, a signed certificate of the encrypted public key associated with the user of the mobile device;
• advertise, wirelessly at the mobile device, the signed certificate of the public key associated with the user of the mobile device;
• cause, at the ancillary device of the user via the driver and the daemon, responsive to receiving identity data associated with the user that is input at the ancillary device, generation of a local account of the user associated with the signed certificate of the encrypted public key;
• receive, at the mobile device of the user and responsive to generation of the local account, an authentication input of the user;
• and
• cause, at the ancillary device and based on determining that the authentication input of the user is valid, transmission of instructions to allow performance of an authorized operation at the ancillary device.

A non-transitory machine-readable storage medium comprising machine-readable instructions for causing a processor to execute a method, the method comprising:

• installing an application on a mobile device, wherein the application is received by the mobile device via a push notification service, wherein the application is configured to enable passwordless authentication to an ancillary device of the user;
• installing a driver and a daemon on the ancillary device, wherein the driver and the daemon are received by the ancillary device via the push notification service;
• generating, at the mobile device, an encrypted key pair comprising an encrypted public key associated with a user of the mobile device;
• receiving, at the mobile device, a signed certificate of the encrypted public key associated with the user of the mobile device;
• causing, at the ancillary device of the user via the driver and the daemon, responsive to receiving identity data associated with the user that is input at the ancillary device, generation of a local account of the user associated with the signed certificate of the encrypted public key;
• receiving, at the mobile device of the user and responsive to generation of the local account, biometric input of the user;
• and
• causing, at the ancillary device and based on determining that the biometric input of the user is valid, transmission of instructions to allow performance of an authorized operation at the ancillary device.