PassKit Digital Credential Provisioning in iOS 16

Apple’s iOS 16 introduces significant enhancements to PassKit, expanding how developers provision, manage, and verify digital credentials and passes in Apple Wallet. This article explores the primary mechanisms PassKit uses in iOS 16 to support seamless pass provisioning, secure identity verification, and multi-platform key sharing.

Enhanced In-App and Background Provisioning

PassKit simplifies the addition of payment cards, transit cards, and digital passes directly within third-party apps using PKAddPassesViewController. In iOS 16, developers benefit from more resilient non-UI provisioning workflows, allowing passes and keys to be configured securely through push notifications or backend triggers without requiring full app navigation. This reduces friction during user onboarding, especially for hotel keys, digital event tickets, and corporate badges.

Digital Identity and Verifiable Credentials via PKIdentityRequest

A major advancement in iOS 16 is the ability for apps to request verifiable identity information using the PKIdentityRequest API. PassKit enables businesses to request specific elements from state-issued IDs and driver’s licenses stored in Apple Wallet, such as verifying that a user is over 21 without exposing their home address or full date of birth.

The provisioning of these credentials relies on secure hardware-backed cryptographic checks. When an identity request is initiated:

  1. The app defines the minimum required information via a data descriptor.
  2. The user reviews the request and authorizes it using Face ID or Touch ID.
  3. PassKit returns a cryptographically signed payload that verifies the credential's authenticity without direct communication between the issuing authority and the requesting app.

Secure Key Sharing Across Platforms

iOS 16 broadens pass utility by allowing users to share digital keys—such as those for hotel rooms, offices, and vehicles—directly through apps like Messages, Mail, and third-party messaging services. PassKit coordinates this secure transfer by:

  • Generating time-limited, revocable cryptographic tokens for the recipient.
  • Enabling recipient devices (including cross-platform Android devices through open standards supported by Apple) to provision the key directly into their local digital wallet.
  • Allowing pass issuers to manage, track, and revoke access programmatically through PassKit web services.

Order Tracking and Rich Pass Metadata

PassKit in iOS 16 deeply integrates pass provisioning with Apple Pay Order Tracking. Issuers and merchants can link verifiable receipts and live shipment tracking directly to order passes in Apple Wallet. Developers can push real-time updates directly to passes using Apple Push Notification service (APNs), ensuring credentials and dynamic details—such as boarding gate changes or updated room access times—remain current without requiring manual user refreshes.