A passkey works on its own as your second factor, cannot be phished, and satisfies an organization's "require MFA" rule just like an authenticator app.
Add one
- Go to Settings → Security → Passkeys → Add a passkey.
- Enter your password, then follow your browser's prompt: fingerprint, face, screen lock or a security key.
- Add more than one, for example a phone and a laptop or a hardware key.
Use it
On the sign-in page choose Sign in with a passkey to skip the password, or Use a passkey at the second-factor step. Browsers without passkey support do not show the button.
Good to know
- Removing your last sign-in method is blocked while your organization requires MFA.
- If you lose every passkey, use an authenticator code or a recovery code. Recovery codes are issued when you register your first passkey.