Passkeys let you sign in with the same unlock you already use on your device, such as Face ID, Touch ID, Windows Hello, a device PIN, or a security key.

How they work

• Setting up a passkey creates a matched key pair for your MAVbase account.
• The private key stays in your device or password manager. MAVbase stores only the public key.
• During sign-in, MAVbase sends a one-time challenge and your device signs it after you unlock locally.

How to set one up

• Sign in with your password, open your profile, and choose the Security tab.
• Under Passkeys, enter a name you will recognize and select Set up passkey.
• Follow your device, browser, password manager, or security key prompt to save it.

Why they are secure

• No password or one-time code is typed into the page, so there is less for an attacker to steal.
• The passkey is bound to the MAVbase site, which helps block lookalike phishing pages.
• Your fingerprint, face, or device PIN is checked by your device and is not sent to MAVbase.
• When 2FA is required, passkey sign-in satisfies it because it proves possession of the registered key and local user verification.