Back to changelog
SecurityAccounts·

Sign in with a passkey

Use Touch ID, Face ID, Windows Hello, or a security key to sign in — no password and no code, and nothing a phishing site can steal.

You can now sign in to Cosmoner with a passkey: your fingerprint, your face, your device PIN, or a hardware security key. No password, no six-digit code — one prompt from your own device and you are in.

Go to Account → Security → Passkeys → Add a passkey. Your device asks you to confirm, and that is the whole setup. From then on, Sign in with a passkey on the login page — or just tapping the email field, where your passkey shows up in the autofill list — signs you in.

Why we think this is the better option, not just another one:

  • There is nothing to phish. A passkey is a keypair whose private half is created inside your device's secure hardware and never leaves it. We only ever hold the public half, so there is nothing in our database worth stealing and nothing for a fake login page to capture — the browser simply will not offer your Cosmoner passkey to a site that is not Cosmoner.
  • It is already two factors. Something you have (the device) and something you are (the fingerprint or face), in a single prompt. That is why a passkey signs you in on its own rather than sitting behind your password.
  • It works in both places. A passkey registered in the control panel works in the admin console too, for the staff accounts that have one.

Two practical notes. If your passkey syncs through iCloud Keychain, Google Password Manager, or 1Password, it follows you to your other devices automatically. If it does not — a Windows Hello passkey or a security key stays put — register a second one so a lost laptop is not a lost account; the security page flags this when it applies to you.

Your password and two-factor authentication are untouched and still work. Passkeys are an addition, and you can remove one at any time from the same page.

Full walkthrough in the passkeys guide.