Skip to main content
Passkeys let you sign in to Encore OS without typing a password. Instead, you unlock your account the same way you unlock your device — with Face ID, Touch ID, Windows Hello, or a hardware security key. Passkeys are phishing-resistant and bound to the Encore OS domain, so a stolen passkey cannot be used on a lookalike site.

When to use a passkey

Use a passkey when you want to:
  • Sign in faster than typing a password and a one-time code.
  • Avoid password reuse without managing a password manager entry.
  • Meet your organization’s stronger-authentication requirements on shared workstations or mobile devices.
You can register more than one passkey per account — for example, one on your laptop and one on your phone — so you are not locked out if a single device is unavailable.
Passkeys are separate from multi-factor authentication (MFA). A passkey signs you in on its own, with no password. MFA still requires your password plus a second factor. You can use either, or both, on the same account.

Requirements

  • A browser that supports WebAuthn (current Chrome, Edge, Safari, or Firefox).
  • A device with a platform authenticator (Face ID, Touch ID, Windows Hello, Android screen lock) or a roaming authenticator (YubiKey, Titan key, or another FIDO2 security key).
  • A confirmed, signed-in Encore OS account. Anonymous and SSO-only accounts cannot register a passkey.
If your browser does not support WebAuthn, the Sign in with a passkey button and the Passwordless sign-in card are hidden automatically.

Add a passkey

  1. Sign in to Encore OS with your password.
  2. Go to Settings → Security.
  3. In the Passwordless sign-in card, select Add a passkey.
  4. Follow your browser or operating system prompt to confirm with your biometric, PIN, or security key.
  5. Give the passkey a name you will recognize later (for example, MacBook — Touch ID or YubiKey 5C).
The new passkey appears in the list immediately and is ready to use on the next sign-in.

Sign in with a passkey

  1. Open the Encore OS sign-in screen.
  2. Select Sign in with a passkey.
  3. Choose the passkey for your account when your browser prompts you.
  4. Confirm with your biometric, PIN, or security key.
You are signed in without entering a password. If your organization requires MFA, you may still be prompted for a second factor on top of the passkey.

Rename or remove a passkey

In Settings → Security → Passwordless sign-in:
  • Select Rename next to a passkey to update its label. Names are visible only to you.
  • Select Remove to delete a passkey. The device or security key it was created on can no longer sign you in to Encore OS.
Remove a passkey whenever you:
  • Sell, return, or lose a device.
  • Reset the operating system on a device.
  • Stop using a shared computer.
You can always add a new passkey on a different device. If you remove your last passkey, sign-in falls back to your password (plus MFA, if enabled).

Troubleshooting