Passkeys
Sign in with Face ID, Touch ID, Windows Hello, or a hardware security key, no password to type.
What a passkey is
A passkey is a credential stored on your device (or your password manager) using the WebAuthn standard. It's phishing-resistant: it only ever works on this app's real domain, so it can't be tricked into signing in on a look-alike site the way a typed password can.
Adding one
From Dashboard → Settings → Security → Passkeys, choose "Add a passkey" and follow your browser's own prompt (Face ID, Touch ID, Windows Hello, or a security key). You can add more than one, from different devices.
Signing in with a passkey
On the sign-in page, choose "Sign in with a passkey" instead of entering a password. Your browser or password manager shows you which registered passkey to use.
As a second factor
If your account also has two-factor authentication on, a passkey can stand in for a TOTP code at the challenge step, see the two-factor authentication page.
Removing one
- Requires a step-up check (a fresh password or code), see Sessions and devices.
- Removing your only passkey is fine as long as you still have a password or a social sign-in method.