Sign in with a passkey

What it is

A passkey lets you sign in with Face ID, Touch ID, Windows Hello, your phone or a security key instead of typing a password. It belongs to you, not to one business, so it signs you in to every business you work with on Bookatu. Your password, Google sign-in and two-step login keep working as they do now, and the phone app signs in as it does today.

Why it helps

There is nothing to remember and nothing anyone can phish. Because it needs your fingerprint, face or PIN on the device that holds it, signing in with one counts as two-step login, including at a business that requires two-step login for everyone. On the Security page it also passes the check that owners and admins have a passkey or two-step login.

How to use it

1. 1Owners and admins: open Settings, then Privacy & security, and find the Passkeys card. Everyone else on the team: tap Two-step login at the top of the admin and find Your passkeys. Anyone can add their own. If your browser cannot make passkeys, the card says so: open the page in an up-to-date Safari, Chrome, Edge or Firefox.
2. 2Tap Add a passkey and give it a name so you can tell your passkeys apart. It suggests one from your device, such as iPhone or Mac. You can have up to 20 passkeys.
3. 3Prove it is you first. Enter your password, or a code from your authenticator app or a recovery code (tap Use a two-step code instead if you have both). If you only sign in with Google there is no password to check, so you must have signed in within the last ten minutes, or you will be asked to sign out and in again.
4. 4Tap Continue and follow your device's own prompt. Your new passkey appears in the list with the date it was added. A Synced badge means it is backed up by the device or account that holds it.
5. 5Next time, choose Sign in with a passkey on the sign-in page, or pick your passkey when your browser offers it in the email field. You are not asked for a two-step code.
6. 6Use Rename to change a name, or Remove then Yes, remove to take one off. You cannot remove your only way to sign in: with no password and no Google sign-in, add another passkey first. On a new device, sign in with your password or Google as usual, then add a passkey for that device.