Skip to main content
Version 1.1In review

Passkeys

What is a passkey?​

Instead of using your usual password, a passkey is a unique access key used during login, based on an additional method like fingerprint or facial recognition, phone PIN, or a physical security key.

A passkey stays on your device and is unlocked by your fingerprint, face, or PIN. When you sign in, your device confirms it is really you to LuxID without ever sending a secret that could be stolen or reused - there is no password to type, remember, leak, or enter on a fake page.

To be better protected against phishing attempts and to log in more easily, we recommend creating a passkey now.

Why use a passkey?​

  • Better protection against phishing - A passkey only works on the real LuxID website. It cannot be used on a fake sign-in page, so it protects you even if you are tricked into visiting one.
  • No more passwords to remember - Your device handles the authentication for you, protecting you against weak password practices.
  • No password to steal - There is no shared secret that could be leaked in a data breach.
  • Fast and convenient - Signing in with a passkey typically takes just a glance or a touch.

What you need​

Operating system​

  • iOS 16 or later
  • Android 9 or later
  • Windows 10 (version 1903) or later
  • Ubuntu 22.04 LTS or later

Browser​

  • Chrome 108 or later
  • Edge 108 or later
  • Firefox 122 or later
  • Safari 16 or later (16.1 or later on macOS)

Screen lock​

A screen lock must be enabled on your device (fingerprint, face recognition, or PIN).

Set up a passkey for your LuxID Account​

  1. Sign in to your LuxID Account (opens in a new tab) with your existing email and password.
  2. Go to Security, then under Connection methods select Passkey.
  3. Select Add Passkey, then Configure a Passkey in the dialog that appears.
  4. When prompted, authenticate with your device or security key - your fingerprint, face, or PIN, or by inserting and tapping a hardware key.
  5. Give the passkey a name you will recognise (for example "My phone" or "YubiKey"), then select Confirm.

Your passkey is now saved. You can register several passkeys - for example, one on your phone and one on your laptop, or several hardware keys. Each one appears in the Passkey list, showing when it was created.

Passkey help for your device​

How a passkey is created and stored depends on your device. For step-by-step instructions in your own environment, see the official guide from your platform:

DeviceOfficial guide
iPhone or iPad (iOS / iPadOS)Use passkeys to sign in to websites and apps on iPhone (opens in a new tab)
Mac (macOS)Sign in to an account on your Mac with a passkey (opens in a new tab)
WindowsCreate and save a passkey (opens in a new tab) (using Windows Hello)
AndroidSign in to your applications and websites with passkeys (opens in a new tab)

Sign in with a passkey​

  1. Go to the LuxID sign-in page at login.luxid.lu (opens in a new tab).
  2. Enter your email address.
  3. When prompted, choose to sign in with your passkey instead of a password.
  4. Authenticate on your device (fingerprint, face, or PIN).
  5. You are signed in.
tip

Sometimes you do not even need to type your email. If your device or password manager recognises the LuxID page, it can offer your passkey straight away - you just authenticate with your fingerprint, face, or PIN. This is sometimes called "usernameless" sign-in.

Managing your passkeys​

From your account page at account.luxid.lu (opens in a new tab), you can:

  • View all registered passkeys
  • Remove a passkey you no longer need (e.g., if you sold or lost a device)
  • Add additional passkeys for new devices

Syncing passkeys across devices​

Passkeys can be synced across your devices through:

If you use a password manager for passkeys, make sure sync is enabled across all your devices. See Password managers for details.

Use a hardware security key​

For the strongest protection, you can store your passkey on a hardware security key - a small physical device (such as a YubiKey) that plugs into a USB port or connects wirelessly. The passkey never leaves the key, so it cannot be copied from your phone or computer. This is one of the most secure ways to sign in.

warning

Hardware security keys do not sync or back up to the cloud. If you lose your only key, you could be locked out of your account. Register at least two keys - for example, one you keep with you and one stored somewhere safe - so you always have a backup.

Passkeys and passwords​

Passkeys do not replace your password - they offer an alternative way to sign in. You can use either method at any time. Your password remains available as a fallback if your passkey device is not with you. Because a passkey is already phishing-resistant, signing in with one does not ask you for a separate 2-Step Verification step.

tip

Even if you primarily use a passkey, keep your password secure and up to date. See Create a strong password.

Common questions​

What happens if I lose my device?​

If you lose the device where your passkey is stored:

  • If your passkeys sync via your platform's cloud (e.g., Apple iCloud Keychain, Google Sync), they will be available on your other devices signed into the same account.
  • If the passkey was only on the lost device, you can still sign in using your password and then remove the old passkey from your account settings.

Can I use a passkey on a shared or public computer?​

You can use a passkey stored on your phone to sign in on another computer. When the sign-in page prompts for a passkey, choose the option to use a device nearby (typically via a QR code). Scan the QR code with your phone and authenticate there.

Do passkeys work with all LuxID partner services?​

Passkeys secure your sign-in to LuxID itself. When you access a LuxID Partner service via "Sign in with LuxID," the passkey authenticates you at the LuxID level - the partner service does not need to support passkeys separately.

Updated 2026-07-02
On this page