Skip to main content

Managing passkeys

Passkeys let you sign in without entering a password. They use a device or password-manager authenticator and require HTTPS or localhost. Availability depends on the deployment's passkey setting.

Register a passkey​

  1. Open Settings > Account > Profile > Passkeys.
  2. Select Add Passkey.
  3. Enter a recognizable device or password-manager name.
  4. Complete the browser or operating-system prompt.
  5. Confirm the passkey appears in the registered list.

Sign in with a passkey​

On the sign-in page, select Passkey, enter your account email, and complete the authenticator prompt. MCP OAuth consent can also offer passkey authentication when the feature is enabled.

Remove a passkey​

Select the passkey in your profile, delete it, and confirm. Remove authenticators that are lost, shared, replaced, or no longer under your control.

Recovery​

  • Register more than one trusted authenticator when policy allows it.
  • Use descriptive names so devices can be identified quickly.
  • Keep an approved recovery or SSO method available.
  • Report suspected compromise even after removing the passkey.