When to use a passkey
Use a passkey when you want to:- Sign in faster than typing a password and a one-time code.
- Avoid password reuse without managing a password manager entry.
- Meet your organization’s stronger-authentication requirements on shared workstations or mobile devices.
Passkeys are separate from multi-factor authentication (MFA). A passkey
signs you in on its own, with no password. MFA still requires your password
plus a second factor. You can use either, or both, on the same account.
Requirements
- A browser that supports WebAuthn (current Chrome, Edge, Safari, or Firefox).
- A device with a platform authenticator (Face ID, Touch ID, Windows Hello, Android screen lock) or a roaming authenticator (YubiKey, Titan key, or another FIDO2 security key).
- A confirmed, signed-in Encore OS account. Anonymous and SSO-only accounts cannot register a passkey.
Add a passkey
- Sign in to Encore OS with your password.
- Go to Settings → Security.
- In the Passwordless sign-in card, select Add a passkey.
- Follow your browser or operating system prompt to confirm with your biometric, PIN, or security key.
- Give the passkey a name you will recognize later (for example,
MacBook — Touch IDorYubiKey 5C).
Sign in with a passkey
- Open the Encore OS sign-in screen.
- Select Sign in with a passkey.
- Choose the passkey for your account when your browser prompts you.
- Confirm with your biometric, PIN, or security key.
Rename or remove a passkey
In Settings → Security → Passwordless sign-in:- Select Rename next to a passkey to update its label. Names are visible only to you.
- Select Remove to delete a passkey. The device or security key it was created on can no longer sign you in to Encore OS.
- Sell, return, or lose a device.
- Reset the operating system on a device.
- Stop using a shared computer.
Troubleshooting
Related
- User management guide — how administrators invite users and manage access.
- Passkeys & WebAuthn — setup and testing — administrator reference for enabling passkeys on an Encore OS project.