# Passkeys: what they are and why use them

**Category:** [Account Security & Sign-in](https://help.totalctrl.app/hc/totalctrl/totalctrl-help-center/en-US/categories/account-security)
**Updated:** 2026-08-19

## What is a passkey?

A passkey lets you sign in with the same thing you use to unlock your device — **Face ID, Touch ID, Windows Hello, or a hardware security key** — instead of a password and code.
### Why passkeys are better

- **Phishing-resistant.** A passkey only works on the real TotalCtrl site, so it cannot be tricked by a fake login page.
- **Nothing to remember or type.** No password and no code to copy.
- **Private.** The secret never leaves your device; only a public key is stored on our servers.

### What you need

A device and browser that support passkeys — recent versions of Safari, Chrome, Edge, and Firefox on modern phones, tablets, and computers. If your browser does not support passkeys, the option is hidden.
### Good to know

You can register more than one passkey (for example, one per device). Passkeys work alongside your other sign-in methods — adding one does not remove your password or authenticator app.

---

## Related Articles

- [Backup codes](https://help.totalctrl.app/en-US/articles/backup-codes)
- [Set up an authenticator app](https://help.totalctrl.app/en-US/articles/set-up-authenticator-app)
- [Configure an SMS provider (administrators)](https://help.totalctrl.app/en-US/articles/configure-sms-provider-admin)
- [Troubleshooting 2FA and passkeys](https://help.totalctrl.app/en-US/articles/troubleshooting-2fa-passkeys)
- [Two-factor authentication (2FA): an overview](https://help.totalctrl.app/en-US/articles/two-factor-authentication-overview)

---
[← Back to TotalCtrl Help Center](https://help.totalctrl.app/en-US/)