Why use a passkey?
- Passkeys are Multi Factor by nature. No need to worry about additional factors.
- Passkeys are more convenient to use. On your phone's browser all you need for login is your thumbprint. On desktop all you need is to scan a QR code with your phone's camera and give your thumbprint.
- Registering a passkey makes your account more secure. With passwordless login your password cannot be brute forced or used to log in via a browser anymore.
What do I need to use a passkey?
- Your Android phone or iPhone. A reasonably modern Android or iPhone works out-of-the-box. No need to install any software.
and/or
- A hardware token like a Yubikey or any other FIDO2-compliant security key
How do I start using passkeys?
Bear in mind that once you register a passkey you cannot log in any other way. This means that you must be able to use a passkey for login on both mobile and desktop devices.
- A passkey registered on your phone works natively with the mobile browser.
- Using the passkey from your phone with a desktop browser works best on the Chrome browser.
- Hardware tokens work with almost any desktop or mobile browser.
To start using passkeys go to Aalto Login passkey registration with your browser.
Logging in to passkey registration
You can log in either with your password or suomi.fi authentication.
The passkey registration view
In the registration view you can add new keys and delete old ones. Passkeys with the label "Passwordless" can be used for passwordless login. Some authenticators that do not implement User Verification correctly require a password after logging in with the passkey.
What if I lose all my passkeys?
After you have registered a passkey, you cannot log in with a password anymore.
If you lose your passkey(s) you can log in to passkey registration with suomi.fi authentication and remove all your registered passkeys. If you cannot use suomi.fi login you have to open a ticket in Service Desk and request your passkeys to be deleted.
After your existing passkeys have been deleted you can log in with a password again to register new ones.