A passkey refers to a cryptographic key pair that uses your biometrics or device PIN to authenticate your identity to the Locker system. Passkeys are stored locally on a phone or a security key. You can use passkeys to log in to your Locker account instead of using a password, as long as you have your device with you.

Create a passkey

First, you will need to create a passkey to log in to Locker with this method. You can create multiple passkeys for your account, using an Android phone or a security key.

1. Go to the URL of your self-hosted Locker web app, then log in to your account.

2. Click Settings > Security > Unlock methods > expand this section.

3. On the Passkeys section, click the Add new passkey button.

1. Enter a name for the passkey. You should distinguish your passkeys by their authentication methods.

2. Choose a method to save your passkey, then click Next. You can store your passkeys with an Android phone (choose iPhone, iPad, or Android device), or a security key (choose Security key).

1. Save a passkey with the chosen method.

• Using an Android phone: use your Android phone to scan the QR code appearing on the web browser. Then scan your FaceID/TouchID on the phone to confirm.

• Using a security key: Connect the security key to your computer, then click OK on the popups appearing to continue setup. Then scan your fingerprint on the key or enter device PIN.

1. After creating successfully, you will see the passkey appear on the passkeys list. Now you can use your passkey to log in to Locker.

Log in with a passkey

1. Go to the URL of your self-hosted Locker web app.

2. On the login page, enter your email and click Continue.

3. Choose the login method as Your passkey.

1. Click the passkey you would like to use then click Continue.

1. Log in using your passkey:

• If your passkey is stored on a Android phone, click iPhone, iPad or Android device > Next. Then use your phone to scan the QR code appearing.

• If your passkey is stored on a security key, click Security key > Next. Connect your security key to the computer, then scan your fingerprint on the key or enter device PIN.

1. Logging in successfully, you will be directed to your vault.

Enable login sync on the same computer

When login sync is enabled, if you sign in on the desktop app, your account will be signed in to the web app and extension on the same computer and vice versa. You also don't need to authenticate your passkey when you access your account again on that computer.

See cross-platform login sync guide

Remove a passkey

You can remove a passkey if you no longer use that passkey.

1. Log in on your web vault.

2. Click Settings > Security > Unlock methods > expand this section.

3. On the Passkeys section, click the section name to expand.

4. Click the Trash button respective to the passkey you want to remove.

5. On the popup that appears, click the Delete button to confirm.

1. Deleting successfully, the passkey will be removed from the passkeys list. You will not be able to log in with that passkey.