Passkeys¶

A passkey signs you in to InstantFeedback with your fingerprint, face, or device PIN instead of a username and password. The passkey is stored by your device or password manager, for example iCloud Keychain, Google Password Manager, Windows Hello, or 1Password, and never leaves it.

• No password to type and nothing to remember.
• No authenticator code, even when two-factor authentication is on.
• Passkeys belong to your user, not to an account. One passkey signs you in to every InstantFeedback account you are a member of.
• You can register as many passkeys as you like, for example one per device.

Before you start¶

• You need a device and browser that support passkeys. Current versions of Chrome, Edge, Safari, and Firefox do, on desktop and mobile.
• You need somewhere to store the passkey: the built-in password manager of your operating system or browser, or a password manager app that supports passkeys.
• Passkeys do not replace two-factor authentication. If your account requires it, you still have to set up an authenticator app; see two-factor authentication.

Add a passkey¶

1. Open User settings from the menu in the top-right corner and select the Security tab.
2. In the Passkeys card, click Add a passkey.

1. Your browser or password manager opens its own prompt. Choose where to store the passkey and confirm with your fingerprint, face, or PIN.
2. InstantFeedback confirms with Passkey … added and lists the passkey in the table.

The passkey is named after the provider that stores it, for example iCloud Keychain or 1Password. If the provider is not recognised, the name is Unknown provider; rename it so you can tell your passkeys apart later.

If the browser prompt is cancelled, nothing is saved and no message is shown. Click Add a passkey again to retry.

Sign in with a passkey¶

The login page shows a Sign in with a passkey button next to Login once you have used a passkey in that browser, either by adding one there or by signing in with one. The browser remembers this for a year.

1. On the login page, click Sign in with a passkey. Leave the username and password fields empty.
2. Pick the passkey in the browser prompt and confirm with your fingerprint, face, or PIN.

You are signed in straight away. The authenticator code step is skipped, even if two-factor authentication is enabled. If the account requires two-factor authentication and you have not set it up yet, the setup page still appears first.

Enable the button in a new browser¶

If you sign in with your password on a browser that has not used passkeys yet, and you have at least one passkey, InstantFeedback asks whether to use passkeys there.

• Use passkey verifies one of your passkeys and switches the Sign in with a passkey button on for that browser.
• Not now continues without changing anything. The prompt can appear again at a later password sign-in.

Browsers that do not support passkeys skip this prompt.

Rename or remove a passkey¶

Open User settings → Security. Each row in the Passkeys table has two actions.

• Click the name to rename the passkey. Use names that tell you which device or password manager holds it.
• Open the gear menu at the end of the row and choose Remove to delete the passkey from InstantFeedback.

Removing a passkey in InstantFeedback does not delete it from your device or password manager. Delete it there as well, otherwise the browser keeps offering a passkey that no longer works.

Passkeys and two-factor authentication¶

The two features are independent:

• Turning two-factor authentication off does not remove your passkeys, and removing all passkeys does not change two-factor authentication.
• When an admin resets your authenticator, your passkeys keep working.
• A passkey sign-in never asks for an authenticator code.
• An account that requires two-factor authentication still requires it from passkey users. The passkey replaces the password, not the authenticator app.

Remove a member's passkey¶

Account admins can see and remove the passkeys of members of their account.

1. Open Settings → Users and click the member's username.
2. Select the Security tab. The Passkeys card lists the member's passkeys with the date each was added and last used.
3. Open the gear menu on a row, choose Remove, and confirm.

Use this when a member reports a lost or stolen device. Removing the passkey does not sign the member out. If that is needed as well, use Reset password or Lock from the gear menu in the top-right corner of the user's page.

Troubleshooting¶