Set up a passkey
Copy for AI
A passkey lets you sign in with your fingerprint, face or device PIN instead of typing a code. It is kept by your phone, computer or password manager, and it only works on the real easySales site, so it cannot be phished. How it fits with the other methods is on Sign-in security.
Before you start
Section titled “Before you start”- A phone or computer with a fingerprint reader, face unlock or a screen lock, or a password manager that stores passkeys. If the card says This browser cannot create passkeys., use another browser or device.
- No permission is needed. You can add a passkey whether or not two-step verification is on. If your company has two-step verification set to Off, the card says your administrator does not allow new passkeys; the ones you have keep working.
- Decide where the passkey lives. A synced passkey — in Apple iCloud Keychain or Google Password Manager, for example — comes with you to a new phone when you sign in to the same account on it. A passkey kept only on one device goes when the device goes.
- Open your menu, select My profile, then Sign-in & security, and find the Passkeys card.
- Select Add a passkey. Complete Confirm it’s you if asked.
- In the Add a passkey dialog, type a Name you will recognise, such as Work laptop. It is optional; left empty, easySales names the passkey after your device and browser.
- Select Continue and follow your device’s prompt: touch the fingerprint reader, look at the camera or enter your PIN.
- If this is your first way to confirm it’s you, save the ten recovery codes shown, tick I have saved these codes and select Done — see Use recovery codes.
To rename one later, select Rename beside it, change the Name and select Save. To remove one, select Remove and confirm; the dialog reminds you to remove it from your device’s passkey list as well. Removing your last way to confirm it’s you opens Remove your last passkey? instead, which asks for your password and ends with Remove and turn off.
What happens next
Section titled “What happens next”The passkey appears in the list with its name, Synced or This device only, the date it was Added and when it was Last used; below the list, N of 10 passkeys. easySales emails you that a passkey was added. From now on you can use it in two ways:
- On its own: on the sign-in page, select Sign in with a passkey and unlock it. No password, no code.
- As your second step: sign in with your password, select Use a passkey instead, then Use your passkey. Don’t ask again on this device for 30 days is not offered after a passkey.
If you also use an authenticator app or email codes, the card offers Remove authenticator app or Remove email codes: two-step verification stays on with your passkeys and recovery codes.
Rules to know
Section titled “Rules to know”| Rule | Detail |
|---|---|
| Passkeys per account | Up to 10 |
| Email to you | When one is added, removed, or looks copied; not when renamed |
| Your password | Stays; you cannot remove it |
| Removing your last passkey, with no app or email codes | Turns two-step verification off: asks for your password and the passkey or a recovery code; refused while your company requires it |
| Turning two-step verification off | Removes every passkey |
| Your administrator resetting your 2FA | Removes every passkey |
- One email in several companies: each company’s account has its own passkeys and its own limit of 10. Your device lists each passkey as your email, a dot and the company’s Licence code in capitals, for example [email protected] · LIMCO. Pick the one for the company you want.
- Refused beside a passkey means it may have been copied, so easySales no longer accepts it. Remove it and add a new one.
- An email you did not expect — a passkey added, removed or looking copied — means someone may have your sign-in. Change your password and tell your administrator.
- Remove the passkey of a device you sell, give away or lose.
Why it works this way
Section titled “Why it works this way”A passkey cannot be typed into the wrong site. Your device offers it only on the real easySales site, so a fake sign-in page or a caller pretending to be support has nothing to collect. That closes the most common way business accounts are taken over.
Nothing easySales keeps can sign you in. Your device holds the private half of the passkey and easySales keeps only the public half, which checks a signature but cannot make one. Your fingerprint or face never leaves your device.
A copied passkey is refused, not trusted. When a passkey looks as if it has been copied, easySales marks it Refused and emails you. You lose one passkey; your account stays closed to the copy.
Your password stays. A passkey is added beside your password, not instead of it, so you can still sign in from a device that has no passkey, and the password is what confirms that you meant to remove your last passkey.
Work faster
Section titled “Work faster”- Pick the passkey from the sign-in box. Where your browser supports it, selecting the Email / username box lists your passkeys among its suggestions; choose one and unlock it. See Sign in.
- Choose a synced passkey. One kept in your phone’s password manager moves to your next phone by itself, with nothing to set up again in easySales. See example A on Security examples.
- Confirm it’s you with the same touch. In the Confirm it’s you dialog, Use your passkey is quicker than typing a code. See Confirm it’s you.
- Name each passkey after its device. Work laptop and Phone tell you which one to remove when a device is lost; Rename sends no email and asks for nothing. See Confirm it’s you.
- Keep one on a second device. Up to 10 passkeys per account means a lost phone never locks you out. See Get back in.
Examples
Section titled “Examples”Sarah Goh’s passkeys in two companies are example C on Security examples.
A laptop left in a taxi. Mei Tan has two passkeys: Work laptop (This device only) and Phone (Synced); the card reads 2 of 10 passkeys. The laptop is lost on Friday evening. From her phone she selects Sign in with a passkey, opens Sign-in & security, selects Remove beside Work laptop and confirms. Her passkey sign-in a minute earlier counts as confirming it’s her, so nothing more is asked. The card now reads 1 of 10 passkeys, and an email confirms the removal.
Changing from a passkey to an app. Daniel Lim uses only a passkey and wants an authenticator app instead. He first selects Turn on under Two-step verification and sets up the app. Only then does he remove the passkey: it is no longer his last way to confirm it’s him, so two-step verification stays on and Remove your last passkey? never appears.
Common questions
Section titled “Common questions”- What is a passkey? A sign-in key kept on your phone, computer or password manager and unlocked with your fingerprint, face or device PIN. There is nothing to type and nothing to remember.
- Is a passkey safer than a password? Yes. It works only on the real easySales site, so it cannot be phished, and nothing stored at easySales can be used to sign in as you.
- Can I use my passkey on another computer? A synced passkey is available on every device signed in to the same password manager account. Otherwise, add a passkey on each device, up to 10.
- Does a passkey replace my password? No. Your password stays and cannot be removed; a passkey is an extra, faster way in.
- Why can’t I add a passkey? Your browser may not support passkeys, your company may have two-step verification set to Off, or you already have 10. The Passkeys card shows the reason or the count.
- What does Refused next to my passkey mean? easySales thinks the passkey may have been copied and no longer accepts it. Remove it, add a new one, and change your password if you did not expect it.
- What should I do when I sell or lose a device with a passkey? Remove that passkey on Sign-in & security from another device. If you cannot sign in at all, see Get back in.