Passkeys explained: signing in with Face ID instead of a password.

What is a passkey?

A passkey is a pair of matching keys made for one website. One key stays locked on your device. The other is stored by the website. When you sign in, the site sends a fresh challenge, your device signs it with its key once you show your face or touch the sensor, and the site checks the signature against the key it holds. If they match, you are in.

Passkeys are a standard built by Apple, Google, Microsoft and the other members of the FIDO Alliance, so they work in the browsers and phones you already use. Scopeology uses passkeys for every account, with no password option at all.

What happens when you sign in with Face ID

1. You open scopeology.ai and tap Sign in.
2. Your phone or laptop asks for Face ID, Touch ID, a fingerprint or your device code.
3. Your device signs the challenge with the passkey saved for scopeology.ai and sends back only that signature.
4. Scopeology checks the signature and opens your account.

Your face and fingerprint never leave your device. Face ID only unlocks the passkey on the phone; Scopeology never sees your face, a photo of it or a fingerprint.

Why there is no password to steal

Most account break-ins start with a password: guessed, reused from another site, or typed into a fake page. Passkeys remove each of those:

• Nothing to guess or reuse. Every passkey is made for one site and is never typed.
• Nothing worth stealing on our side. Scopeology stores only the public half of your passkey. On its own it cannot sign anyone in.
• Fake pages get nothing. Your device ties each passkey to scopeology.ai and will not offer it to a look-alike address.

That is one part of how your account stays private. Security covers the rest, including how each account's data and agent are kept apart.

Creating your first passkey

You make your passkey when you join. Type your first name, tap Create my passkey and confirm with your face or fingerprint. There is nothing else to set up for signing in. Next you pick how to pay. See how it works for what happens after you join.

Adding a second device

Add a second passkey early, so losing one phone never locks you out. From Settings, on a device where you are already signed in, you have two ways:

• Add your phone: show a code on your computer and scan it with your phone's camera. The code works once and expires after 10 minutes.
• Add a passkey here: save another passkey on the device in front of you. Your browser lets you choose where it goes, such as iCloud Keychain or Google Password Manager, which can sync it to your other devices.

Settings lists each passkey with when it was last used. You can remove one you no longer need, such as an old phone. Scopeology never lets you remove your last passkey, so you always have a way in.

If you lose your phone

Sign in from another device with its own passkey, open Settings and remove the lost phone's passkey. From that moment it no longer signs in. If your passkeys sync through iCloud Keychain or Google Password Manager, a new phone signed in to the same account gets them back.