> ## Documentation Index
> Fetch the complete documentation index at: https://docs.encoreos.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Sign in to Encore OS with a passkey

> Add, use, rename, and remove passkeys to sign in to Encore OS without a password using your device biometric, PIN, or security key.

Passkeys let you sign in to Encore OS without typing a password. Instead, you
unlock your account the same way you unlock your device — with Face ID, Touch
ID, Windows Hello, or a hardware security key.

Passkeys are phishing-resistant and bound to the Encore OS domain, so a
stolen passkey cannot be used on a lookalike site.

## When to use a passkey

Use a passkey when you want to:

* Sign in faster than typing a password and a one-time code.
* Avoid password reuse without managing a password manager entry.
* Meet your organization's stronger-authentication requirements on shared
  workstations or mobile devices.

You can register more than one passkey per account — for example, one on your
laptop and one on your phone — so you are not locked out if a single device is
unavailable.

<Note>
  Passkeys are separate from **multi-factor authentication (MFA)**. A passkey
  signs you in on its own, with no password. MFA still requires your password
  *plus* a second factor. You can use either, or both, on the same account.
</Note>

## Requirements

* A browser that supports WebAuthn (current Chrome, Edge, Safari, or Firefox).
* A device with a platform authenticator (Face ID, Touch ID, Windows Hello,
  Android screen lock) **or** a roaming authenticator (YubiKey, Titan key, or
  another FIDO2 security key).
* A confirmed, signed-in Encore OS account. Anonymous and SSO-only accounts
  cannot register a passkey.

If your browser does not support WebAuthn, the **Sign in with a passkey**
button and the **Passwordless sign-in** card are hidden automatically.

## Add a passkey

1. Sign in to Encore OS with your password.
2. Go to **Settings → Security**.
3. In the **Passwordless sign-in** card, select **Add a passkey**.
4. Follow your browser or operating system prompt to confirm with your
   biometric, PIN, or security key.
5. Give the passkey a name you will recognize later (for example,
   `MacBook — Touch ID` or `YubiKey 5C`).

The new passkey appears in the list immediately and is ready to use on the
next sign-in.

## Sign in with a passkey

1. Open the Encore OS sign-in screen.
2. Select **Sign in with a passkey**.
3. Choose the passkey for your account when your browser prompts you.
4. Confirm with your biometric, PIN, or security key.

You are signed in without entering a password. If your organization requires
MFA, you may still be prompted for a second factor on top of the passkey.

## Rename or remove a passkey

In **Settings → Security → Passwordless sign-in**:

* Select **Rename** next to a passkey to update its label. Names are visible
  only to you.
* Select **Remove** to delete a passkey. The device or security key it was
  created on can no longer sign you in to Encore OS.

Remove a passkey whenever you:

* Sell, return, or lose a device.
* Reset the operating system on a device.
* Stop using a shared computer.

You can always add a new passkey on a different device. If you remove your
last passkey, sign-in falls back to your password (plus MFA, if enabled).

## Troubleshooting

| Symptom                                                           | What to try                                                                                                                                                                         |
| ----------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Sign in with a passkey** button is missing on the login screen. | Your browser does not expose WebAuthn, or your administrator has not enabled passkeys yet. Update your browser, or contact your administrator.                                      |
| The passkey prompt does not appear.                               | Check that your device biometric is enrolled (Face ID, Touch ID, Windows Hello) and that your browser has permission to use it.                                                     |
| "No passkeys available" when signing in.                          | The passkey for this account lives on another device. Use that device, sign in with your password, or contact your administrator to add a new passkey.                              |
| You lost the only device with a passkey.                          | Sign in with your password (plus MFA if enabled), then remove the lost passkey and add a new one. If your account is passwordless-only, contact your administrator to reset access. |

## Related

* [User management guide](/platform/USER_MANAGEMENT_GUIDE) — how administrators
  invite users and manage access.
* [Passkeys & WebAuthn — setup and testing](/platform/auth/PASSKEYS_SETUP) —
  administrator reference for enabling passkeys on an Encore OS project.