How to Enable Passkey Authentication
Set up WebAuthn passkeys for the strongest, most convenient login security using biometrics on your device.
This is the security-settings route to the same passkey the sign-in guide covers. Worth doing once per device you actually trade from: the private key stays in the device's secure hardware, so there is no shared secret for a phishing page to capture and nothing to type into a lookalike site.
Before you start
- A device with biometrics or a screen lock, and a current browser or the Midas app.
- A fallback that still works — magic link or authenticator — for devices with no passkey on them.
Why Use Passkeys
Passkeys are phishing-resistant, device-bound credentials that use your biometrics (Face ID, fingerprint, Windows Hello) for authentication. Unlike passwords or SMS codes, passkeys cannot be intercepted, phished, or reused. They represent the gold standard in account security.
Navigate to Passkey Settings
Go to Profile > Security > Passkey Management. This screen lists all registered passkeys and allows you to add new ones. You can register multiple passkeys across different devices.
Register a Passkey
Tap 'Register New Passkey'. Your device will prompt for biometric authentication. Complete the Face ID, fingerprint, or PIN verification. The passkey is created and stored securely on your device.
Name and Save
Give the passkey a recognizable name for identification (e.g., 'iPhone 15 Pro', 'Work MacBook'). This is helpful when managing multiple passkeys across devices. The passkey is immediately active for login.
Sign In with Passkey
On your next login, select 'Sign in with Passkey'. Authenticate with your biometric and you are instantly signed in. No email link or code needed. Passkeys work across devices if synced through your platform's passkey system (iCloud Keychain, Google Password Manager).
If something goes wrong
- Registration is offered but fails at the last step.
- Private or incognito windows block passkey storage on most platforms. Try an ordinary window, and check the browser is up to date.
- You want the passkey on a second device.
- Register it there too. Passkeys only travel by themselves if your platform syncs them through iCloud Keychain or Google Password Manager.
- You want to remove a passkey but are not sure which device it belongs to.
- The list shows the name given at registration and when it was last used. If a name was never set, last-used is the reliable way to identify it.
Frequently asked questions
- Does a passkey replace 2FA?
- It replaces the day-to-day sign-in step, not the guard on sensitive actions. Keeping both is the stronger arrangement and costs nothing once set up.
- What if somebody steals the device?
- They still need the biometric or the screen-lock code to use the passkey, and you can revoke it from any other signed-in device.
- Why name a passkey?
- Because the list only helps you if each entry says which device it belongs to when you come to remove an old phone.
- Can a passkey be copied to another device?
- Only where your platform syncs them for you. Otherwise the private key stays in the device's secure hardware, which is the property that makes it strong.