Passkeys

A passkey lets you sign in to CVD Portal with your fingerprint, your face or a security key instead of your password. Passkeys are available on every plan.

Add a passkey

1. Go to Settings → Account (https://cvdportal.com/settings/account).
2. In Passkeys, select Add a passkey.
3. Follow the dialog of your browser or password manager. It asks for your fingerprint, your face, your device PIN or a security key.

The passkey shows in the list with the name "Passkey 1". Select Rename to give it a name of 1 to 60 characters. We send you an email each time a passkey is added to your account.

To add a passkey, your sign-in must be less than 15 minutes old. If it is older, the page asks you to sign in again first.

You can have up to 10 passkeys.

Sign in with a passkey

On the sign-in page, do one of these:

• Select Sign in with a passkey under the password form.
• Select the email field. Your browser shows your passkeys in its suggestions. Select one.

A passkey sign-in does not ask for your email, your password or your authentication code. The passkey checks your fingerprint, face or PIN, so it counts as two factors.

Passkeys work on cvdportal.com and on your portal address under it, for example acme.cvdportal.com. They do not work on a custom domain.

Synced and device-only passkeys

The list shows the type of each passkey.

Type	What it means
Synced	Your password manager (for example iCloud Keychain, Google Password Manager or 1Password) keeps the passkey and copies it to your other devices.
This device only	The passkey stays on the device or the security key that made it. If you lose the device, you lose the passkey.

Remove a passkey

Select Remove next to the passkey and confirm. Removing a passkey signs you out of every session, this one included. You then sign in again. The passkey also stays in your password manager or on your device until you delete it there.

If you lose every passkey, sign in with your password, or with Google, GitHub or Microsoft. If you do not know your password, use Forgot password? on the sign-in page.

Passkeys and single sign-on

An account that your company created through single sign-on (SAML SSO) cannot add a passkey. Your company's identity provider manages the sign-in of that account. A passkey would keep the account open after the identity provider disables it.

Passkeys and the other sign-in methods

• Your password, two-factor authentication and Google, GitHub or Microsoft sign-in do not change when you add a passkey.
• A failed passkey sign-in does not count toward the account lock after repeated wrong passwords. A passkey sign-in works while the password is locked.
• Each passkey sign-in shows in the Audit Log and the Access Report as a sign-in "with a passkey".