Login with passkey

Login with passkey is an authentication method that lets users sign in with biometrics or a PIN on their device.

Passkeys work together with other login methods: the project must keep at least one other login method enabled (classic, social, or passwordless), which serves as a fallback. If a passkey is saved on the user’s phone, they can sign in on another device by scanning a QR code with the phone.

Notice

Passkey login requires a compatible device and operating system.

Currently, a user can create only one passkey.

How it works

A passkey is created once, after which the user can sign in with it on the same or another device. Below are possible user scenarios.

Create a passkey

  1. The user signs in with any usual method (classic, social, passwordless).
  2. The login widget prompts the user to create a passkey.
  3. The user confirms the creation with biometrics or a PIN.
  4. The passkey is linked to the user.

Sign in with a passkey

  1. The user chooses Use passkey in Login Widget. The button appears if passkeys are enabled for the project and supported by the browser and the device.
  2. The browser offers the passkeys saved on the device.
  3. The user confirms with biometrics or a PIN.
  4. The user is authenticated.

Sign in on another device

  1. The user chooses Use passkey on the device where the passkey is not saved.
  2. The user scans the QR code shown by the browser with the device where the passkey is saved.
  3. The user confirms with biometrics or a PIN on the phone.

Set up login with passkey

  1. In your project in Publisher Account, go to the Players > Login section.
  1. In your project in the account, go to the Players > Login section.
  1. In your project in the account, go to the Players > Login section.
  1. In your project in the account, go to the Players > Login section.
  1. In your project in the account, go to the Other tools > Login section.
  1. Click Configure in the panel of a login option.
  1. Make sure the following settings are in place:
    • The URL of the authentication page is added to Allowed origins (CORS) , so that requests from this page to the Login API work.
    • Check the project name in Publisher Account. Users will see it in the list of passkeys in the browser.
  1. Make sure the following settings are in place:
    • The URL of the authentication page is added to Allowed origins (CORS) , so that requests from this page to the Login API work.
    • Check the project name in your account. Users will see it in the list of passkeys in the browser.
  1. In the login option settings, go to the Passkeys section.

  2. Turn on the Allow passkeys toggle.

Notice
The project must keep at least one other login method (classic, social, or passwordless) enabled.
  1. Click Save changes.
Was this article helpful?
Thank you!
Is there anything we can improve? Message
We’re sorry to hear that
Please explain why this article wasn’t helpful to you. Message
Thank you for your feedback!
We’ll review your message and use it to help us improve your experience.
Last updated: October 28, 2026

Found a typo or other text error? Select the text and press Ctrl+Enter.

Report a problem
We always review our content. Your feedback helps us improve it.
Provide an email so we can follow up
Thank you for your feedback!
We couldn't send your feedback
Try again later or contact us at [email protected].