Create a passkey

Create your passkey at your first sign-in and, if you can, a second one on another device (for example your laptop and a security key). With two, losing one does not lock you out.

How do I create the passkey?

1. Sign in to the console and open «Protect» › «Trusted devices».
2. Choose «Create passkey». The «Add device» dialog opens.
3. In «Device name», type a name you will recognise, for example "Office laptop".
4. If this is the account's first passkey, fill in «Current password». The password only authorises this first authenticator.
5. Choose «Create ProofFlow passkey» and confirm on the device with biometrics, a PIN or the security key.
6. The console shows «This device is now protected by ProofFlow.»

My account already has a passkey or a phone. What changes?

The password no longer authorises new authenticators. The console shows «Existing authenticator» and first asks for a recent confirmation with the strong factor you already have (another passkey or your approver phone). If that confirmation is older than five minutes, the console asks for it again.

What can I use as an authenticator?

• The computer's biometrics or PIN (for example Windows Hello).
• Your phone, through the browser's passkey prompt.
• A FIDO2 security key with a PIN.

The service requires local verification (biometrics or PIN); a key without a PIN does not qualify.

Common messages

After creating it

Generate your recovery codes and keep them away from the computer: they are your way back in if you lose every passkey. See Generate recovery codes.