Passkeys

passkeys let you log in to fusion signage without a password they’re more secure, use your device’s built in security (like face id, touch id, or a security key), and are easy to manage this guide explains what passkeys are, how to set them up, and how to keep your account safe what are passkeys? passkeys are a new, secure way to log in without using a password instead of typing a password, you use your device’s built in security—like face id, touch id, windows hello, or a security key passkeys can be stored on your phone, laptop, or in a secure cloud keychain you can use biometrics (fingerprint or face), a pin, or your device unlock to log in your passkey is never shared with fusion signage instead, your device proves who you are using secure cryptography this makes passkeys much safer than passwords and protects you from phishing how does fusion signage use passkeys? fusion signage supports passkeys as a secure login option for your account you can register one or more passkeys to your user profile – allowing you to sign in using your device’s built in authentication (such as touch id, face id, windows hello, or a hardware security key like yubikey) please note once you activate passkeys for your account, you will no longer be able to log in with your username and password you must use a passkey to sign in passkeys can be used for password less sign in to the fusion signage web portal strong multi factor authentication (mfa) account self recovery (if you have multiple passkeys registered) each passkey is unique to your account and device you can manage your registered passkeys in the security section of your account settings if you log in from more than one device, make sure you use a cloud based passkey (like icloud keychain, google password manager, or 1password), or; register a separate passkey on each device you use how do you register a passkey in fusion signage? go to settings > security > login methods in the fusion signage web portal in the passkeys section, click register a new passkey give your passkey a descriptive name ('work laptop', or 'iphone', or 'yubikey') to help you identify it later follow the prompts to use your device’s biometric, pin, or security key to complete registration once registered, your new passkey will appear in your list of passkeys you can use it to log in immediately please note passkey registration requires a supported browser (recent versions of chrome, edge, safari, or firefox) and a compatible device if you have more than one device and can’t use a cloud based passkey, you can use the account reset feature to add another device to do this, go to the login page on your new device and choose account reset follow the prompts your other passkeys will stay active how do you use a passkey to sign in? on the fusion signage login page, enter your email address (as usual) if you have a passkey registered, you’ll see an option to 'sign in with passkey' select this option and follow your device’s authentication prompt (biometric, pin, or security key) if successful, you’ll be logged in without needing your password how do you manage or revoke passkeys? view passkeys see all passkeys registered to your account in settings > security > passkeys rename give each passkey a unique, descriptive name for easy management to rename a passkey, click its name, type a new name and either click away from the name entry field or hit enter on your keyboard revoke if you lose a device or no longer want a passkey to be valid, click the x button in the top right of the passkey's entry, then revoke next to the passkey this immediately disables it for future logins add multiple you can register multiple passkeys (phone, laptop, security key) for backup and convenience the text next to the passkey the text of a passkey entry will look something like 1password multi device backed up platform cloud assisted created 3 days ago last used 2 minutes ago authenticator if we have enough information to determine it, we will display the name of the authenticator handling the passkey this can help you quickly identify which passkey is which if we can't figure out which authenticator was used, or the authenticator did not disclose itself, we will not display any label for this part passkey type this is always present, and is one of two values – multi device (synced) or single device (unsynced) passkey type security synced usability notes multi device high yes high the best general option for most use cases your passkey is synced to a cloud service or otherwise available over bluetooth or similar to be used by multiple devices single device highest no medium higher security, but unnecessary for most use cases your passkey is bound specifically to an individual device, and cannot be otherwise transferred or used backup status this is always present authenticators provide an indicator of whether the passkey is backed up or not in general, multi device passkeys will show up as 'backed up', but due to their nature single device passkeys will probably show as "not backed up" having a backup passkey can prevent account lockout, but in some very high security environments, it presents issues with assurance that only one device has the passkey transport transport meaning internal the passkey is stored and used within your device (built in fingerprint reader or face id on your phone or laptop) hybrid the passkey can be used both locally and via a cloud or companion device (like a phone unlocking a laptop via bluetooth) platform the passkey is managed by your device’s operating system (windows hello, macos touch id, android/ios biometrics) cloud assisted the passkey is synced and available across multiple devices via a cloud service (icloud keychain, google password manager, 1password) nfc the passkey is accessed via a device that supports near field communication (like tap a security key or smart card to your device) usb the passkey is accessed via a usb security key (yubikey, solokey) cable the passkey is accessed via a physical cable connection (lightning, usb c, or micro usb security keys) smart card the passkey is stored on a physical smart card, which you insert into a compatible reader created and used timestamps we show general time indicators for the time the passkey was created and used (updated) when the passkey is used for authentication, it is updated in the process, so we show you the last time the passkey was updated as the last time it was 'used' tips and tricks register multiple passkeys this will allow you to still log in with the other passkeys in your account should you ever lose access to the original passkey use different authenticator platforms there are different types of authenticator platforms for passkeys using different types will also prevent you from locking yourself out of your account setup passkeys for each device you use many types of passkeys are device specific and "single device" in these cases you should make sure you register a passkey for each device you login with if you revoke or remove a passkey, delete it from your authenticator platform too revoking a passkey in the fusion signage platform does not remove it from your authenticator, and may make things confusing if you have multiple passkeys registered in your authenticator which do not all work what happens if you lose access to a passkey? if you lose a device with a registered passkey, don’t you worry you can regain access by following the account recovery process after you’re back in, go to your account settings and revoke the lost or inaccessible passkey as soon as possible if you have other passkeys registered, you can still log in using those please note if you lose all your passkeys and cannot log in, you’ll need to use account recovery or contact fusion signage support for help security and expiry passkeys do not expire automatically, but you can revoke them at any time for best security, regularly review your passkeys and remove any you no longer use check your security health in the security section of your account settings for tips and suggestions fusion signage may notify you if we detect unusual activity with your passkeys additional resources guide passkeys australian cyber security centre (australian signals directorate) https //www cyber gov au/protect yourself/secure your accounts/passkeys learn more about passkeys (fido alliance) https //fidoalliance org/passkeys/ fusion signage support centre https //support fusionsignage com au/en/ looking for something else? we can’t wait to hear about it reach out to our sunshiney support and we'll be in touch in a flash