Sign in with a passkey or require two-factor authentication

Let the office and field team use Face ID or a fingerprint instead of a password, and choose which second step your workspace requires.

Add a passkey for yourself

Sign in with your password once. Open Settings, then Account, and choose Add a passkey. Your phone asks for Face ID, a fingerprint, or a PIN. The next visit to the sign-in page can use Sign in with a passkey.

Password and Google sign-in stay available. Remove a passkey from the same Account page if you lose the device.

Set the rule for the whole workspace

Owners and admins open Settings, then Sign-in security. Leave passkeys on so anyone who adds one can skip the password. Turn passkeys off if this workspace should only accept a password or Google.

Turn on Require two-factor authentication and pick the steps you accept: an authenticator app, a passkey, or both. One accepted step is enough. People who have not set one up can still open Account to add it. Connecting a bank account still asks owners and admins for an authenticator app.

FAQ

Does a passkey replace two-factor authentication?

Only if you accept passkeys as a second step. Signing in with a passkey already checks the device. If you accept only an authenticator app, people still enter that code after a password, and a passkey sign-in is not enough.

Try these workflows in your workspace — free for 7 days.

Start free trial