Sign in with a passkey

A passkey lets you sign in to Tavala with Face ID, Touch ID, your fingerprint, your face or your screen lock instead of typing your password. Your device or password manager keeps the private part of the passkey, and Tavala stores only the public part. A passkey also confirms it is you before you connect a bank. You need an account, and your password keeps working.

Add a passkey

1. Sign in, then open SettingsSign-in & security. On a phone, Settings is the round person icon at the top right. On an iPad or a Mac it is at the foot of the rail or the sidebar.
2. Under Passkeys, tap Add a passkey. If you already have one, the row reads Add another passkey.
3. Your device confirms it is you, then the system passkey sheet opens. Follow it to create the passkey with Face ID, Touch ID, your fingerprint, your Mac password or your screen lock.
4. Tavala says "Passkey added. Use it to sign in and to confirm it's you."

If you do not see a Passkeys section, passkeys are not available on this device or browser, or you are a guest. Passkeys are offered on iPhone, iPad, Mac, Android and in browsers that support them.

Sign in with a passkey

1. On the Sign in screen, tap Sign in with a passkey. The button shows only on the Sign in screen, not on Create account.
2. Choose your Tavala passkey in the system sheet and confirm with your face, fingerprint or screen lock.
3. Tavala signs you in. If you also set up an authenticator app, it still asks for the 6-digit code.

Remove a passkey

1. Open SettingsSign-in & security.
2. On the passkey's row, tap Remove. The row shows the name your password manager gave it, and "Added" with the date.
3. In the sheet Remove this passkey?, tap Remove. You can still sign in with your password. Tavala stops accepting the passkey at once.
4. Your device confirms it is you. Tavala says "Passkey removed. Delete it from your phone's passwords too." The message names your phone, your Mac or your browser.

Your device keeps its own copy of the passkey until you delete it from its passwords. Delete it there too, or it will keep offering a passkey that no longer works.

Good to know

• A passkey is the check for banks in a browser. The web app has no Face ID prompt of its own. To connect a bank there, Tavala asks for a passkey, and says "Add a passkey first" if you have none. On a phone or a Mac, your device confirms it is you, and a passkey also counts. See connect a bank account.
• One passkey per device for each account. If this device already has one, Tavala says "This phone already has a passkey for your account. Add another from a different device or a security key."
• Passkeys are not for creating an account. Create the account with an email and password first, then add a passkey. See create an account.
• If something fails, the messages say what to do. For example, "No passkey for Tavala on this phone. Sign in with your password, then add one in Sign-in & security." and "That passkey is for a different account."
• Passkeys are optional. You can sign in with your password every time.