Sign in with a passkey

A passkey lets you sign in with your fingerprint, your face or the screen lock of your device. Your device or your password manager keeps the passkey. PasserJack keeps only a public key, and a public key cannot sign anybody in.

A passkey is optional. Google, Apple and a sign-in link emailed to your address continue to work.

A passkey cannot make an account. To use PasserJack for the first time, sign in with Google, Apple or an emailed link.

1. Sign in to PasserJack with Google, Apple or an emailed link.
2. Open Settings > Sign-in.
3. Press Add a passkey. Then do the steps that your browser shows.

You can add a passkey only in the 10 minutes after a sign-in with Google, Apple or an emailed link. This stops a person who finds your account open on a shared computer from adding a passkey of their own. If Settings tells you to sign in again, press Sign in again.

A sign-in with a passkey does not let you add a passkey. One sign-in lets you add one passkey. An account can have 10 passkeys.

In the PasserJack app for iPhone, iPad and Mac, there is no Add button. To add a passkey, open passerjack.com in Safari, sign in, and add it there. To connect or reconnect the app, sign in with Google, Apple or an emailed link. A passkey sign-in cannot connect a device.

Your browser or your password manager decides where to save the passkey. For example, iCloud Keychain on an iPhone, iPad or Mac, Google Password Manager in Chrome, a password manager such as 1Password, or a security key.

A passkey in iCloud Keychain or Google Password Manager is also on your other devices that use the same Apple or Google account.

Settings > Sign-in shows each passkey with its reference, the date and time you added it, and the last time it signed you in. The words after “Reported by the browser:” and “Reported by the authenticator:” come from your device. PasserJack cannot confirm them.

1. Open the PasserJack sign-in page.
2. Press Sign in with a passkey.
3. Choose your passkey. Then confirm with your fingerprint, your face or your screen lock.

Some browsers also show your passkeys when you select the email field on the sign-in page.

After a passkey sign-in, you can use your board, your vault and your share links as usual.

A passkey sign-in cannot create agent keys, connect apps or connect phones and devices. This is because those connections stay after you remove the passkey. To do these things, sign in with Google, Apple or an emailed link.

A passkey sign-in can still disconnect an app, revoke a key or remove a device.

1. Open Settings > Sign-in.
2. Press Remove on the passkey.
3. Read the message. Then press Remove again.

When you remove a passkey, every browser and app that signed in with it is signed out. Agent keys, connected apps and phones do not change, because a passkey sign-in cannot create them.

If this browser signed in with a passkey, you can remove only that passkey here. To remove a different passkey, sign in with Google, Apple or an emailed link first.

PasserJack does not delete the passkey from your device or your password manager. To stop your device from offering it, delete it in your password manager too.

A link for everyone at an organization opens only if you signed in with Google, Apple or an emailed link in the last 7 days. A passkey sign-in does not count.

If one of these links does not open, press Switch account on that page. Then sign in with Google, Apple or an emailed link. See share links.

Each passkey sign-in reports a use count. If a passkey that is saved on only one device reports a lower count than before, PasserJack thinks the passkey may have been copied. PasserJack then refuses that passkey, signs out every browser and app that signed in with it, and sends you an email. Remove that passkey in Settings > Sign-in, then add a new one.

A passkey that is synced between your devices (for example, in iCloud Keychain or Google Password Manager) can report a lower count when you use it on a different device. This is normal, so PasserJack does not refuse it. PasserJack only sends you an email. If you did not sign in at the time that the email gives, remove that passkey.

A lost passkey does not lock you out.

1. Sign in with Google, Apple or an emailed link.
2. Open Settings > Sign-in.
3. Remove the passkey that was on the lost device. This signs out every browser and app that signed in with that passkey.

PasserJack sends you an email when somebody adds a passkey to your account. The email gives the passkey’s reference. If you did not add it, do these steps immediately:

1. Sign in with Google, Apple or an emailed link.
2. Open Settings > Sign-in. Find the passkey with the reference from the email, or a passkey that you do not know. A passkey shows a New label for 7 days after somebody adds it.
3. Press Sign out of every other browser and app. On that passkey, select Remove this passkey too. Then press Sign out and remove.
4. Open Devices and Agents. Step 3 does not remove phones, agent keys or connected apps. Remove each one that you do not know.

Step 3 signs out every other browser and app on your account and removes the passkeys that you select. It also signs out every browser and app that signed in with those passkeys. The browser that you use stays signed in.

Do step 3 in the 10 minutes after step 1. After that time, or after a passkey sign-in, step 3 does not sign out a browser that signed in with Google, Apple or an emailed link after you did, and a passkey sign-in does not remove other passkeys. The page tells you when this occurs. Then do step 1 again, and do step 3 again.