Manage your passkeys

Account & Profile is where your own credentials live.

Your profile

Name and email, read-only. They come from the identity that signed you in, so they are changed where that identity lives rather than here.

Add a second passkey

The single most important thing on this page.

Add a passkey registers another one — a different laptop, a phone, a hardware key. Set up for new sign-in registers one directly in the page for the on-host sign-in flow, without leaving the console.

Until you have two, the console warns you on Overview. With one passkey and one lost device, there is no password to fall back on: another admin has to send you a new setup link, and if you are the only admin, that becomes a support ticket.

The passkey list

Each with a name — or "Unnamed passkey", which is what you get when the browser did not supply one — and a status of active or pending.

Remove deletes one, after a confirmation. You cannot remove your last passkey; that request is refused with an explicit message rather than a generic error.

Remove the passkeys of devices you no longer have. A passkey on a laptop you returned to a previous employer is still a working credential.

What "pending" means

A passkey that was created but whose registration has not completed. If one sits pending, remove it and register again.

Account & Profile — your own passkeys. The last one cannot be removed, which is what stops a self-lockout.