Passkeys

Passkeys provide the most secure and convenient way to sign in to your Featul account. Using your device’s built-in biometrics or security key, passkeys offer phishing-resistant authentication without the need for passwords.

​

What Are Passkeys?

Passkeys are a modern authentication standard that replaces passwords:

• Passwordless - No passwords to remember or type
• Phishing-resistant - Cannot be stolen or intercepted
• Biometric - Uses your fingerprint, face, or device PIN
• Fast - Sign in with a single tap or glance
• Secure - Based on public key cryptography

Passkeys are built on the WebAuthn standard and supported by all major platforms and browsers.

​

How Passkeys Work

When you create a passkey:

1. Your device generates a unique cryptographic key pair
2. The private key stays on your device (never shared)
3. The public key is stored on Featul’s servers
4. During sign-in, your device proves it has the private key
5. Authentication completes without transmitting passwords

​

Supported Platforms

Passkeys work on most modern devices and browsers:

​

Operating Systems

• iOS/iPadOS 16+ - Face ID, Touch ID
• macOS Ventura+ - Touch ID
• Android 9+ - Fingerprint, Face Unlock, Device PIN
• Windows 10+ - Windows Hello (fingerprint, face, PIN)

​

Browsers

• Chrome 109+
• Safari 16+
• Edge 109+
• Firefox 122+

​

Security Keys

• YubiKey 5 Series
• Google Titan Security Key
• Any FIDO2-certified security key

​

Creating a Passkey

To add a passkey to your Featul account:

1. Sign in to your Featul account
2. Navigate to account settings
3. Go to the “Security” section
4. Click “Add Passkey”
5. Enter a name for the passkey (e.g., “iPhone”, “YubiKey”)
6. Click “Create Passkey”
7. Follow your device’s authentication prompt:
   • Touch ID/Face ID - Authenticate with biometric
   • Windows Hello - Use fingerprint, face, or PIN
   • Android - Use fingerprint or device PIN
   • Security Key - Insert and tap your security key
8. Your passkey is now created and ready to use

​

Signing In with Passkeys

To sign in using a passkey:

1. Navigate to the Featul sign-in page
2. Click “Sign in with Passkey”
3. Your browser will prompt for authentication:
   • Mobile - Use Face ID, Touch ID, or fingerprint
   • Desktop - Use security key, Touch ID, or Windows Hello
   • Cross-device - Scan QR code with your phone
4. Authenticate with your biometric or device PIN
5. You’re signed in instantly

​

Cross-Device Authentication

You can use a passkey from your phone to sign in on your computer:

1. Click “Sign in with Passkey” on your computer
2. Select “Use a phone, tablet, or security key”
3. A QR code appears on your computer
4. Scan the QR code with your phone
5. Authenticate on your phone with biometric
6. You’re signed in on your computer

​

Managing Passkeys

​

Viewing Your Passkeys

To see all passkeys registered to your account:

1. Sign in to Featul
2. Go to account settings
3. Navigate to “Security” > “Passkeys”
4. View all registered passkeys with:
   • Passkey name
   • Date created
   • Last used date

​

Renaming Passkeys

To rename a passkey:

1. Go to security settings
2. Find the passkey in your list
3. Click “Rename”
4. Enter a new descriptive name
5. Click “Save”

​

Removing Passkeys

To remove a passkey you no longer use:

1. Go to security settings
2. Find the passkey in your list
3. Click “Remove”
4. Confirm the action

​

Security Best Practices

​

Create Multiple Passkeys

• Add a passkey for your primary device
• Add a passkey for a backup device
• Consider a hardware security key as an additional backup

​

Use Hardware Security Keys

For maximum security, add a hardware security key:

• YubiKey, Google Titan, or other FIDO2 key
• Cannot be remotely compromised
• Works across all devices
• Ideal for high-security accounts

​

Protect Your Devices

• Enable biometric locks on all devices
• Use strong device PINs
• Keep devices updated
• Don’t share devices with untrusted users

​

Cloud Sync Considerations

• Apple devices - Passkeys sync via iCloud Keychain
• Android devices - Passkeys sync via Google Password Manager
• Cross-platform - Create separate passkeys for each platform

Cloud-synced passkeys are encrypted and require your device authentication to use.

​

Combining Passkeys with Other Methods

​

Passkeys + Email/Password

Use passkeys as your primary method with email/password as backup:

1. Sign in quickly with passkeys most of the time
2. Use email/password if passkeys aren’t available
3. Best of both worlds: security and flexibility

​

Passkeys + OAuth

You can use both passkeys and OAuth:

1. Passkeys for fast, secure access
2. OAuth for convenience on new devices
3. Choose the method that works best in each situation

​

Passkeys + 2FA

Passkeys are inherently two-factor:

• Possession factor - You have the device
• Biometric factor - Your fingerprint or face

You don’t need additional 2FA with passkeys, but you can enable it for other authentication methods.

​

Rate Limiting

Passkey authentication has generous rate limits:

• 10 verification attempts per minute
• Resets after 60 seconds

​

Troubleshooting

​

Passkey Option Not Available

1. Check browser support
   • Update to the latest browser version
   • Use Chrome, Safari, Edge, or Firefox
2. Verify device compatibility
   • Ensure your OS version supports passkeys
   • Check that biometric hardware is enabled
3. Enable biometric authentication
   • Set up Touch ID, Face ID, or Windows Hello
   • Configure fingerprint or face unlock on Android

​

Cannot Create Passkey

1. Ensure you’re using a supported browser and device
2. Check that biometric authentication is set up
3. Try using a different authenticator option
4. Clear browser cache and try again

​

Passkey Authentication Failed

1. Verify correct biometric
   • Use the enrolled fingerprint or face
   • Ensure good lighting for face recognition
   • Clean fingerprint sensor
2. Try device PIN
   • Most platforms allow PIN as fallback
   • Use your device unlock PIN
3. Use different passkey
   • If you have multiple passkeys, try another
   • Select “Try another way” and choose a different method

​

Lost Device with Passkey

1. Sign in using a different authentication method
2. Go to security settings
3. Remove the passkey from the lost device
4. Add a new passkey to your current device

​

Passkey Not Working After Device Reset

If you reset or restored your device:

1. Passkeys stored locally are erased
2. Cloud-synced passkeys should restore automatically
3. If not restored, remove the old passkey and create a new one

​

Platform-Specific Notes

​

iOS/iPadOS

• Passkeys sync via iCloud Keychain
• Requires Face ID or Touch ID
• Works in Safari and Chrome
• Syncs across all Apple devices

​

macOS

• Passkeys sync via iCloud Keychain
• Requires Touch ID or device password
• Works in Safari, Chrome, Edge
• Can use iPhone as authenticator

​

Android

• Passkeys sync via Google Password Manager
• Works with fingerprint, face, or device PIN
• Available in Chrome and other browsers
• Syncs across Android devices

​

Windows

• Uses Windows Hello
• Supports fingerprint, face, PIN, security keys
• Available in Edge and Chrome
• Can sync via Google Password Manager in Chrome

​

Next Steps