Skip to main content

Passkeys

Updated

Overview

Passkeys let you sign in to the portal using your device's built-in biometrics or PIN — Face ID, Touch ID, Windows Hello, or a PIN — instead of typing a password. They're faster, phishing-resistant, and don't require you to remember anything.

How Passkeys Work

A passkey is a cryptographic credential stored on your device (phone, laptop, or tablet). When you sign in, the portal asks your device to confirm your identity. Your device uses your biometric (face or fingerprint) or device PIN to authorize the sign-in — nothing is ever typed, and nothing is sent over the internet that could be stolen.

You can have multiple passkeys on multiple devices. Each one is tied to the device it was created on.

Adding a Passkey

  1. Sign in to the portal (using your password or Microsoft sign-in first).
  2. Go to Trusted Devices in the sidebar.
  3. Under Enrolled Passkeys, click Add Passkey.
  4. Your browser will prompt you to use your device's biometric or PIN. Follow the on-screen instructions.
  5. Give the passkey a name that helps you remember which device it's for — for example, "Work MacBook" or "iPhone 15".
  6. Click Save. The passkey now appears in your list.

You can repeat this process on each device you want to use for passwordless sign-in.

Signing In With a Passkey

  1. Go to your portal sign-in page.
  2. Enter your email address.
  3. Choose Sign in with a passkey (or your browser may prompt you automatically if it detects an enrolled passkey).
  4. Follow your device's biometric or PIN prompt — Face ID, Touch ID, Windows Hello, or your device PIN.
  5. You're signed in.

No password needed.

Removing a Passkey

If you want to remove a passkey — for example, because you replaced a device — follow these steps:

  1. Sign in to the portal.
  2. Go to Trusted Devices → Enrolled Passkeys.
  3. Find the passkey you want to remove and click the trash / remove icon next to it.
  4. Confirm the removal.

That passkey is immediately revoked. Anyone using that device (including you) can no longer use it to sign in until a new passkey is enrolled.

If you're removing a passkey from a lost or stolen device, do this as soon as possible and also consider changing your password.

Frequently Asked Questions

Can I use a passkey on my phone and my laptop?

Yes. You can enroll a separate passkey on each device. Each one works independently. Just follow the "Adding a Passkey" steps on each device you want to set up.

What happens if I lose the device my passkey is on?

The passkey on that device stops working once you remove it from the Enrolled Passkeys list. Sign in using your password (or another enrolled passkey on a different device) and then remove the lost device's passkey from Trusted Devices.

Do I still need a password if I have a passkey?

You can still sign in with a password as a backup. Having a passkey doesn't disable password sign-in. We recommend keeping a strong password on your account regardless.

My browser didn't offer a passkey option.

Passkeys require a browser and operating system that support WebAuthn. Modern versions of Chrome, Safari, Edge, and Firefox all support it. Make sure your browser is up to date. On older devices, passkeys may not be available.

Is a passkey the same as MFA?

No, but passkeys are considered a stronger form of authentication than a password alone. Whether you also need MFA depends on your organization's settings. Some organizations require MFA in addition to a passkey; others may not.

Related