Add a passkey

A passkey replaces your password with a credential held by your device, password manager, or security key. It is tied to the site you register it with, which helps protect against fake sign-in pages.

Passkeys are per-account and available on every plan, managed on Settings → Profile.

Add one

Open Settings → Profile and find the Passkeys card under Sign-in & security. Select Add passkey.

Your browser offers the devices or password managers it supports — Touch ID, Face ID, Windows Hello, 1Password or another password manager, or a hardware security key. Complete the prompt and the passkey appears in the list with the date it was created.

The button reads Opening… while the browser prompt is up. If you dismiss the prompt, nothing is registered and you can simply try again.

Note

A passkey belongs to the authenticator that created it. Register one on each device you sign in from — or use a password manager that syncs passkeys, in which case one registration covers everything signed in to that manager.

Sign in with it

Go to the ScatterSpoke login page and put the cursor in the email field. Your browser offers any passkeys it holds for ScatterSpoke; pick one, complete the device prompt, and you are signed in — no password, no separate button to press.

If no passkey appears, check that you are using the browser or password manager where you saved it. You can use another available sign-in method, such as your password or SSO.

Remove one

Each registered passkey has a trash button. Removing it revokes that credential for your ScatterSpoke account.

Delete the passkey from the device or password manager too, or it lingers there as a dead entry.

Removing a passkey is not the same as revoking a session. If you are removing one because a device was lost, also sign out other sessions from the Sessions panel further down the same page.

Passkeys and two-factor authentication

They solve different problems and it is worth keeping both.

• A passkey replaces the password at sign-in.
• Two-factor authentication protects the password path that still exists — for you, for an administrator using SSO recovery, or on any browser where the passkey is unavailable.

Before relying on a new passkey, test it in a separate browser window while keeping your current session open. Keep another working sign-in method for account recovery.