Skip to main content

Using Passkeys for Secure Multi-Factor Login

Steps for any Encompass user to set up, use or remove a passkey (Face ID, fingerprint or security key) for multi-factor login from the Profile page. One passkey per account. Requires v26.02+.

B
Written by Bailey Naas-Thornton

Minimum Version Required: 26.02

Pre-Conditions

  • To use this functionality, your device must support biometric authentication (such as Face ID or fingerprint scanning) or a compatible hardware security key. Your web browser must also support the WebAuthn standard.

Steps

To setup a passkey:
​
​

  1. Navigate to your Profile page within the system (bottom left corner, in the menu on any desktop page)
    ​
    ​

  2. Click the "Add Passkey MFA" button on the left side. A secure popup window will appear to facilitate the registration.
    ​
    ​

  3. Follow your device's prompts to verify your identity using biometrics or a hardware key.
    ​
    ​

  4. Once registration is successful, the popup will close, and your passkey will be active.
    ​
    ​
    ​

To use a passkey for login:
​
​

  1. On the login page, enter your username and password as usual.
    ​
    ​

  2. If a passkey is registered, the system will automatically present a biometric or security key prompt in a pop-up. If no passkey is available, the system will default to the standard push notification method.
    ​
    ​
    ​

To remove a passkey:
​
​

  1. Navigate to your Profile page within the system (bottom left corner, in the menu on any desktop page)
    ​
    ​

  2. Click the "Remove Passkey MFA" button on the left side

Fields And Definitions

  • Passkey: A secure digital credential that allows for passwordless or multi-factor authentication using your device's built-in security, such as a fingerprint reader or facial recognition.
    ​
    ​

  • WebAuthn: The global security standard used to provide a secure and encrypted connection between your device and the system during the authentication process.

Best Practices

  • Enhance Security: Use passkeys to significantly reduce the risk of phishing and credential-based attacks, as they are much harder to compromise than traditional passwords.
    ​
    ​

  • Primary Device Setup: The best passkey option is a password manager that allows the passkey to be centralized to an account, such as the Apple Password Manager or Microsoft Password Manager. These allow the passkey to be used on any device where you are signed in with your Apple/Microsoft acount. If a central, shared account can't be used, register your passkey on your primary work device to ensure the fastest login experience.
    ​
    ​

  • Single Credential Limit: Note that only one passkey can be registered per Encompass account. Ensure you register the device or security key you use most frequently.

Did this answer your question?