Review and remove passkeys

«Protect» › «Trusted devices» lists your account's passkeys. Remove the passkey of a device you lost, sold or no longer use straight away.

How do I remove a passkey?

1. Open «Protect» › «Trusted devices» and, if needed, choose «Refresh devices».
2. Choose the passkey to remove. «Remove device» opens with the warning «This device will no longer be able to authenticate the account.»
3. Confirm. The console asks for a recent confirmation (passkey or phone) when the last one is older than five minutes.

The sessions that came from that passkey end.

Why can't I remove my last passkey?

The last passkey can be removed only after you confirm your recovery method: the console asks for the «Recovery password». Without this rule you would be left with no strong way to sign in.

If «Confirm the recovery password to remove the last passkey.» appears, type your account password and try again.

I am in a recovery session. Why is it refused?

A session opened with a recovery code removes an authenticator only while another one stays active. Create the replacement passkey first; then sign in with it and remove the old one. The message is «Complete the recovery: add a passkey or a Presence authenticator and sign in again with it.»

How many passkeys should I have?

At least two, on different devices. A session started with a password alone cannot remove passkeys: «The password no longer removes passkeys or Presence authenticators.»

Can my administrator see my passkeys?

They see each passkey's name, when it was used and its status, never keys or biometric data.