Passkey not offered

One of these:

• Your browser does not show a saved passkey when you click into the email field, and Sign in with a passkey does nothing useful.
• The page says This browser cannot use passkeys here. Use another method.
• The page says The passkey did not work. Try again or use another method., or That passkey could not be verified. Try again or use another method.
• The page says No passkey was found for this account.
• After you sign in, no Add a passkey offer appears.

The passkey is not on this device#

A passkey lives on a device or in a password manager. A passkey stored on your phone is not available on a laptop that does not share the same keychain, and a passkey in one password manager does not appear in another. Your browser lists only the passkeys it can reach.

The passkey was made for a different site#

A passkey is tied to a domain when it is created and works only for that domain. Identity's passkeys are tied to the shared parent domain, so one passkey works for every TDACorp product that uses identity. A passkey created for another website is never offered here, and a passkey cannot be moved to another domain. See Passkeys.

The account has no passkey, or you removed it#

The Passkeys tab under Security shows what is registered. If it reads None yet, add one. If you removed a passkey, it stops working at once, although your device may still list it until you delete it there too.

The browser or device cannot do it#

Identity asks for a passkey that you unlock on the device: a fingerprint, a face scan, a device PIN or a security key. A browser that cannot do that shows This browser cannot use passkeys here. A prompt that you dismiss, or that is not answered in time, ends in The passkey did not work. A passkey prompt is valid for 5 minutes by default and works once; an operator can shorten that, to no less than 30 seconds, never lengthen it.

The method is not available for you#

The sign-in page shows only the methods available to you. An organization can limit the methods its members may use, and where passkeys are not allowed for the sign-in you started, the passkey route is refused before anything is asked of your device.

The offer after sign-in is shown only sometimes#

After a password sign-in the page can offer Add a passkey, with Create a passkey and Skip for now. It appears only where the deployment makes the offer, and once you have seen it, it is not repeated at every sign-in. You can always add a passkey from your account.

• Use another method for now. Choose a password, an emailed link or an external provider on the same page. See Signing in.
• Add a passkey on this device. Sign in another way, open Security, then Passkeys, optionally type a name in Name for this passkey, and select Add a passkey. See Security and passkeys.
• Keep more than one. The platform will not remove your only way to sign in. Register a passkey on each device you use, or keep a password as well.
• You lost the only passkey. A correct password still signs you in. On a browser the account already uses it is enough. On a new browser or place, choose Continue with my password only (limited session) or Email me a code instead. Enter your password (or, after an emailed link, choose Use my password instead). On Confirm it is you the page can offer Email me a code instead, with Lost your passkey? We can email an 8-digit code to the address you are signing in with instead. The sign-in is one level lower than a passkey. The I lost my passkey link starts recovery. See If you are locked out.
• No other way in. Use Forgot password?, or the recovery steps the account supports. See Cannot sign in.

A passkey never sends a secret to the site: your device sends a signature that is bound to the real domain. A copy of the sign-in page on a fake site would receive nothing it could use, because the browser will not release a passkey for the wrong domain.

• Passkeys
• Security and passkeys
• Signing in