Sign in with a passkey

A passkey replaces the password: nothing to remember, nothing to type. My account accepts several, so losing one never locks me out.

Where my key lives

A passkey is stored in one place only, and that place never changes after registration.

My key is stored in	To use it
On my YubiKey	I enter the key’s PIN, then touch it
In my vault	I unlock the vault, then confirm

I don’t have to choose when signing in: the right window opens automatically, depending on the key the service requires.

Signing in

1. I open the service and enter my username.
2. I click Passkey.
3. The window that opens tells me what to do: enter the PIN and touch the YubiKey, or unlock the vault.

Multiple keys, no lockout

Primary YubiKey, backup YubiKey, vault passkey, and finally password plus a six-digit code. These four methods remain valid at all times. See Managing my account.

When things don’t go as planned

Three symptoms come up often. None fixes itself: in all three cases, I notify my administrator.

• The browser asks for a YubiKey PIN when I wanted to use my vault. I unplug the YubiKey and try again. If the prompt persists, my vault passkey was probably lost on the server side.
• The vault opens when I wanted to use my YubiKey. I dismiss the window. Confirming it would replace an existing key.
• No window opens, or the sign-in fails silently. I sign in with my password and six-digit code, then report the issue.

Never register a key yourself

A window offering to register or replace a passkey only appears during a registration done with an administrator. Outside of that moment, I always dismiss it.