WebAuthn (Passkeys) Authentication in Tiki
What are Passkeys?
Passkeys let you sign in without a password using your device:
- Fingerprint
- Face recognition
- Device PIN
They are secure, fast, and resistant to phishing.
Passkeys are controlled by your device and browser, not Tiki.
You CAN expect:
- Fast login without password
- Device-based authentication (fingerprint / face / PIN)
- Multiple devices per account
You CANNOT control in Tiki:
- Which Google/Apple account appears
- PIN strength rules
- Device prompt language
- Passkey storage location
- Credential selection UI (handled by browser)
-
Enable Passkeys (Admin Setup)
Steps
- Go to: Settings → Control Panels → Global Setup → Registration & Log in
- Enable:
- Advanced Features
- WebAuthn (Passkey login)
- Click Apply
First enable advanced preferences, then activate WebAuthn under Registration & Log in.
-
Access WebAuthn Menu
- Return to the landing page
- Click WebAuthn in the menu (always visible)
This page lets you manage, add, and delete passkeys.
-
Manage Your Passkeys
You can view all your registered devices here.
From here you can
- View registered devices
- Add new ones
- Delete unused ones
-
Add Your First Passkey
Steps
- Click Register Device
- Confirm using your device (fingerprint, face, or PIN)
You do not need to enter a username when using passkeys.
Authentication is handled directly by your device.
- (Optional) Give your device a name
Use names like My Phone or Work Laptop.
-
Sign In with a Passkey
Steps
- Go to the login page
The "Login with a passkey" button is visible and highlighted.
- Click Passkey / WebAuthn Login
- Select your credential and confirm
No password required.
-
Register an Account with a Passkey (Recommended)
This option appears only if user registration and WebAuthn are enabled.
Steps
- Go to the registration page
- Enter your account details
- Click Register
- After registration, a setup card appears
You can choose to create a passkey immediately or skip.
- Click Create Passkey
- Confirm using your device (fingerprint, face, or PIN)
This is the easiest and recommended way to set up a passkey.
-
Use Multiple Devices
To add another device
- Log in on another device
- Click WebAuthn
- Click Register Device
Always register at least 2 devices to avoid losing access.
-
Delete a Passkey
Steps
- Click WebAuthn
- Click delete on a device
Deleting a passkey in Tiki removes it from your account only.
It will still exist on your device or password manager.
-
Authentication Behavior
If you cancel the authentication prompt, it is NOT an error.
You can try again anytime.
-
Login Method Behavior
All authentication methods are independent.
-
Why You May See Multiple Entries
This depends on your browser or password manager, not Tiki.
-
If You Lose a Device
If you still have access
- Log in using another device
- Remove the lost device
If you lose all devices
- Use password recovery
- Or contact your administrator
-
How Passkeys Work
- Your device stores a private key
- Tiki stores a public key
Tiki never stores your biometric data or PIN.
-
Compatibility
Browsers
- Chrome
- Edge
- Safari
- Firefox
Platforms
- Windows
- macOS
- Android
- iOS
-
Best Practices
- Add more than one device
- Keep your password as a backup
- Remove unused devices