How do I sign in with Face ID or a fingerprint (passkeys)?
Add a passkey to sign in with your device's own lock instead of your password, and to confirm it's you in one touch.
A passkey lets you sign in to your dashboard with your device's own lock — Face ID or Touch ID on an iPhone, iPad or Mac, your fingerprint or screen lock on Android, Windows Hello on a PC — instead of typing your password. It also answers "Confirm it's you" (the check before refunds, deletions and other big changes) in one touch. Your password always still works.
Passkeys are for venue owners and admins signed in with their own account. They can't be added from a staff PIN sign-in.
Add a passkey
- Straight after signing in. If your account doesn't have a passkey for this site yet, answering "Yes, it's mine" to "Keep me signed in on this device?" on a phone or computer that can hold one asks whether you'd like to sign in with its lock next time. Choose the button that names your device's lock (for example "Use Face ID or Touch ID") and follow your device's prompt, or Not now to skip — we won't ask again for 30 days. Once your account has a passkey we don't offer another; add more from your account page (below). If two-step sign-in is off, you can choose Set up two-step instead.
- Any time. Open Account → Sign-in and security (from your profile menu), expand Sign-in and authentication, and click Add a passkey. If you signed in more than a few minutes ago, you'll first confirm it's you with your password or Google (and your two-step code if it's on). Then click Add passkey and follow your device's prompt.
We email you whenever a passkey is added to or removed from your account. You can have up to 10.
Sign in with a passkey
On the sign-in page, click Sign in with a passkey and choose your passkey. There's no email or password to type, and no two-step code: a passkey is already two checks in one — the device it's saved on, and your face, fingerprint or device PIN. There's no security check box either: a passkey already proves a real person is signing in. On a computer without its own lock, your browser can show a code to scan with your phone instead.
After a passkey sign-in, "Keep me signed in on this device?" works exactly as it does after a password sign-in — and once you've said "Yes, it's mine" on a device, you won't be asked again there (see How do automatic sign-outs work?).
Confirm it's you with a passkey
When an action asks you to confirm it's you, click Use your passkey above the password box and use your device's lock. The confirmation lasts for the rest of your security session on that device only — just like confirming with your password (see Why am I asked for my password before some actions?).
See, rename or remove your passkeys
On Account → Sign-in and security, the Sign-in and authentication section lists your passkeys: each one's name, when it was added and when it was last used, and whether it syncs to your other devices (through iCloud Keychain or Google Password Manager, for example). Click Rename to give one a name you'll recognise, or Remove to stop it working — you'll be asked to confirm it's you first. A passkey you haven't used for 13 months is removed automatically; you can add it again any time.
If you get an email about a passkey you didn't add, remove it straight away, then change your password and sign out everywhere.
Good to know
- A passkey can't be phished: it only works on ResoFlow's own address, so a look-alike site can't use it.
- A passkey doesn't switch two-step sign-in on for your account — your password alone can still sign you in until you set up two-step — so we still recommend both.
Related: How do I set up two-step sign-in? · How do I see and end active sessions? · Why am I asked for my password before some actions?