Skip to content

Menu AuthGuardHelp centre

End users · Signing in

Sign in with a passkey

2 min read
SaaS · Self-hosted

A passkey is a credential stored on your computer, phone or security key, unlocked by that device's biometrics or PIN. It is the safest way to sign in and the only phishing-resistant one.

Open the sign-in page of your organization's authentication service.
Fill in «Organization» (when asked) and «Email».
Choose «Sign in with a passkey (this device)».
Your operating system asks for biometrics, a PIN or the security key. Confirm.
The console opens in the «Protect» area.

When your organization has single sign-on turned on, the same sign-in then lets you into its other applications without confirming again.

What do I need?

A current browser that supports passkeys. The product's tests use Chrome; other browsers are not part of that evidence.
A passkey already created for this account and this address. See Create a passkey.

What happens to my biometric data?

Nothing leaves your device. Biometrics or the PIN only unlock the local key; the service receives a signature only. The console puts it this way: «The system may ask for biometrics or a PIN to unlock the credential».

What if an error appears?

Message	What to do
«This browser does not support passkeys.»	Use another current browser, or sign in with your password and phone
«The operation was canceled or timed out. Try again.»	You closed the system prompt or took too long. Try again
«Could not verify the identity.»	Wrong organization or email, or the passkey belongs to another account. Check both fields

If no passkey is offered at all, see The passkey is not offered.

Does the passkey work at another address?

No. A passkey is bound to the address where it was created. If your organization moves to its own domain, you create a passkey at that new address.

Error codes in this article

Article referenceeu-sign-in-passkeyquote it to support to identify this article. Checked against the product at commit 5f6607a8.