Compare Revisions

Passkeys, Mozilla accounts

Sign in to your Mozilla account with a passkey using your device, and learn how to create, use, and manage passkeys.

[[Template:progressiverollout]] A passkey lets you sign in to your Mozilla account using your device’s authentication methods, such as your fingerprint, face, PIN, or a hardware security key, instead of a password. Passkeys are designed to be phishing-resistant, to be stored securely on your device, and never to be shared with Mozilla. __TOC__ =About passkeys= A passkey is a secure credential that is created on your device and linked to your Mozilla account. When you sign in using a passkey, your device verifies your identity using whatever unlock method it supports — a fingerprint, face recognition, PIN, or a physical security key — and confirms it to Mozilla without ever revealing the credential itself. When you sign in with a passkey, it also counts as two-step authentication, so you won't be asked for a separate authentication code. Passkeys work across most modern browsers and devices. You can add more than one passkey to your account — for example, one for your laptop and one for a security key. ;[[Image:passkeysmozillamenu|width=600]] {note}Note: Passkey support is still evolving across browsers, operating systems, and devices. Even on supported browsers, some configurations, such as certain hardware, OS versions, or enterprise policies, may not support passkeys.{/note}<!-- If you run into trouble, see Troubleshoot passkey issues with your Mozilla account or refer to your browser's passkey documentation. (this is for a future update)--> If passkeys are not supported, you can still sign in using your password, a linked account (Google/Apple), or a verification code sent to your email address. =Create a passkey= #Sign in to your Mozilla account accounts.firefox.com. #Open {menu Settings}. #Under {menu Security}, find the {menu Passkeys} section. #;[[Image:passkeysmozillamenu2|width=600]] #Click {button Create}. #Follow the prompts from your browser and device to authenticate; use your fingerprint, face, PIN, or security key. #;[[Image:passkeysmozillamenu3|width=600]] #Your passkey is saved. It will appear in your passkey list with an auto-generated name that depends on the type of device added (e.g., Passkey 1, Passkey 2, Security Key, etc.). #;[[Image:passkeysmozillamenu4|width=600]] =Sign in with a passkey= #Go to https://accounts.firefox.com. #Click {button Sign in with passkey}. #;[[Image:passkeysmozillamenu|width=600]] #Your browser will prompt you to authenticate. Use your fingerprint, face, PIN, or security key. #;[[Image:passkeysmozilladialog|width=600]] #Sign in to Firefox Sync with a password #*Firefox Sync still requires your password to protect your encrypted browsing data. You'll see a screen titled Enter your password to sync with the message: "To keep your data safe, you need to enter your password when you use this passkey." This is expected — it doesn't mean anything went wrong. Enter your password to finish connecting Sync. #**;[[Image:passkeysmozilladialog2|width=600]] #*If you need to sign in to access your Mozilla account or Mozilla services like Mozilla Monitor or Mozilla VPN, you won't see this screen and no password is required. #You are signed in! In either case, no additional confirmation (email confirmation or two-step authentication) is needed to complete your sign-in when you use a passkey. {note}'''Note''': If no passkeys are found on your device, or if the sign-in fails, you can sign in with your password, linked Apple or Google account, or a verification code sent to your email address instead.{/note} =Manage your passkeys= ==View your passkeys== Go to {menu Settings} > {menu Security} > {menu Passkeys}. Each passkey in the list shows its name, the date it was created, and when it was last used. #;[[Image:passkeysmozillamenu5|width=600]] ==Delete a passkey== #In {menu Settings} > {menu Security} > {menu Passkeys}, click the delete icon next to the passkey. #You'll be asked to verify your identity with an authentication code before the passkey is removed. #A confirmation dialog will appear: Delete your passkey? Click Delete passkey to confirm. #;[[Image:passkeysmozilladelete|width=600]] #The passkey is removed. You'll see a '''"Passkey deleted"''' confirmation. {note}'''Note''': If you delete your only passkey, you’ll need to use another sign-in method to access your account. Depending on how your account is set up, you may be able to sign in with a linked Google or Apple account, your password, or a verification code sent to your email address.{/note} =Passkeys and two-step authentication= Signing in with a passkey satisfies two-step authentication. This means: *You will '''not''' be prompted for an authentication code from your authenticator app when you sign in with a passkey. *You will not be asked to enter a verification code sent to your email address to complete sign-in. Your existing two-step authentication methods (authenticator app, backup authentication codes, recovery phone) remain active for sign-ins without a passkey. {note}'''Note''': Some Mozilla services, such as Firefox Add-ons Developer Hub (addons.mozilla.org/developers), require that your account have two-step authentication enabled. A passkey can be used to complete two-step authentication when you sign in to your Mozilla account. However, some Mozilla services may still require you to have another two-step authentication method configured on your account before you can access them.{/note} =General passkey help= For general help with passkeys on your device or browser, such as where passkeys are stored, how to manage them in your OS, or known platform limitations, refer to the support documentation for your browser or operating system. =Frequently asked questions= ==Can I have more than one passkey?== Yes. You can add up to 10 passkeys, for example, one for each device or hardware security key you use. Each appears in the passkey list in Settings with its own name, created date, and last-used date. If you reach the limit, delete a passkey you no longer use to make room for a new one. ==What if I lose the device that has my passkey?== Sign in to your Mozilla account using your password or another passkey, then go to Settings > Security > Passkeys and delete the passkey for the lost device. ==Are passkeys safer than passwords?== Yes. Passkeys are generally safer than passwords. They are designed to be phishing-resistant; they only work on the site they were created for, so a fake sign-in page can't trick you into handing one over. The passkey isn’t revealed and may be stored locally or securely synced by your passkey provider. ==Do I still need a password if I have a passkey?== Your Mozilla account password is still required for Firefox Sync. A Mozilla account password can also be used as a backup sign-in method. Keep your password somewhere safe, even after adding a passkey. ==Can I use a passkey on a shared or public computer?== It's not recommended. Passkeys are tied to the specific device or security key where they were created. On a shared computer, sign in with your linked account or password instead. =Related articles= *[[Troubleshoot passkey issues with your Mozilla account]] *[[Secure your Mozilla account with Two-Step Authentication]] *[[Change your Mozilla account password]]