1. What is Passkey?
Passkey is a next-generation passwordless authentication method that uses your device’s built-in Face ID, fingerprint recognition, screen unlock PIN, or hardware security key to verify your identity.
No need to enter a username and password More secure, resistant to phishing and password leaks More convenient, simply log in with the authentication method you already use on your device
Once enabled, you can log in to Mavis directly with Passkey on supported browsers and devices.
2. Why introduce this feature?
Enhanced security: Replaces traditional passwords with public-key cryptography, reducing the risk of account compromise. Improved convenience: No need to remember or type passwords—just use Face ID, fingerprint, or PIN. Cross-device support: Use your mobile device to scan a QR code and log in to Mavis on your computer.
3. Before you begin
Before setting up Passkey, please ensure:
📱 Your mobile device has Face ID, fingerprint recognition, or screen unlock PIN enabled.
💻 Your computer or browser supports WebAuthn (e.g., Chrome, Safari, Edge, and other modern browsers).
🔑 We recommend registering at least two Passkeys (e.g., one on your phone and one on your computer) to avoid losing access if a single device is unavailable.
⚠️ Important: If Face ID or fingerprint recognition is not enabled on your mobile device, you will not be able to register or use Passkey.
4. Basic workflow
Add a Passkey
Go to User Profile → Passkey. Click “Add Passkey”: Available only for native Mavis accounts. If you use Google / Microsoft SSO or LDAP, the button will be disabled. Your browser will trigger the WebAuthn flow and prompt you to authenticate using one of the following: Face ID, fingerprint, or PIN QR code for cross-device registration Hardware security key Upon successful registration, a success message will be displayed. If registration times out or is canceled, an error message will appear.
Manage Passkeys
Click “Manage Passkey”. A list of your registered Passkeys will be displayed. Available actions: Rename: Click Edit → change name → Save (or Cancel to discard). Delete: Click Delete → confirm in the pop-up → Passkey will be removed and unlinked.
Log in with Passkey
On the login page, select Passkey Login. Depending on your device, the system may offer: Direct authentication with a Passkey stored in your browser Scanning a QR code with your phone Using a hardware security key or other supported method
5. Frequently Asked Questions (FAQ)
Q1: Do I still need my username and password?
A1: If you have registered a Passkey, you can log in password-free on supported devices and browsers. However, we recommend keeping your password for fallback when Passkey is not available.
Q2: Where is my Passkey stored?
A2: Passkeys are stored on your device (browser, mobile phone, or hardware security key) and are tied to your biometric authentication (Face ID, fingerprint) or PIN.
Q3: What happens if I change my phone or computer?
A3: You will need to register a new Passkey on the new device. We recommend setting up Passkeys on multiple devices to avoid losing access.
Q4: Can I register a Passkey if I log in with Google / Microsoft SSO or LDAP?
A4: Currently, only native Mavis accounts support Passkey registration. SSO and LDAP accounts are not supported.
Q5: What should I do if registration keeps failing?
A5: Please check:
Face ID / fingerprint is enabled on your phone You are using a WebAuthn-supported browser Your internet connection is stable If the issue persists, try again or contact customer support.
Q6: Can I delete a Passkey?
A6: Yes. You can delete Passkeys in the Manage Passkey section. Once deleted, the Passkey will immediately become invalid and unlinked.
Q7: Do I have to use Passkey to log in?
A7: No. Passkey is an additional login option. You can still log in with your username and password.