Passkeys are recommended because they bypass traditional authentication methods that expose users to phishing, credential stuffing, and brute-force attacks, such as:

• Password Spraying: Simple, predictable passwords are easily guessed by attackers, which enables them to use these common combinations across millions of accounts.
• Credential Stuffing: The use of the same password across different sites means a data breach at one company enables those attackers to 'stuff' those stolen credentials into other services for unauthorized access. 
• Phishing: Because traditional sign-ins do not verify a site's legitimacy, attackers can easily trick users by hosting malicious forms that look identical to real sign-in pages. 

Although Two-Factor Authentication (2FA) adds a layer of defense, attackers can still bypass SMS codes or push notifications via 'SIM swapping' and '2FA fatigue' attacks. Passkeys effectively neutralize these threats. 

The primary types are Passkey - Platform Authenticator, Passkey Cross-Platform Authenticator, and Security Keys, as briefly described in the following table. Click on a Type / Link for more details. 

1. Start the sign-in process for the Vonage Admin Portal, Desktop App, or Mobile App.
2. Enter your username, password, and validate with two-factor authentication (2FA).
3. Select Create a passkey.
   
   NOTE: Passkey setup is currently optional, and you can choose I’ll do this later. If you choose this option, you are not prompted again for seven (7) days or the next 10 sign-in attempts, whichever occurs first.
    

4. Follow prompts for the passkey options presented to you. These options presented depend on your device type, browser, browser features enabled, and the security features set up by your Network Administrators.

   In the following example, the user is set up with Windows Hello.
   
    

5. Click Continue to use the secure Windows Hello option, which is a PIN and Fingerprint recognition in the following example.
   
   NOTE: If you click Change, the system offers more options, which include cross-platform or hardware security keys.
    
   
   Once the passkey is created, you are redirected to the Vonage platform. Going forward, you will be prompted to sign in with your Passkey, and 2FA (SMS) becomes your backup method. 

1. Start the sign-in process for the Vonage Admin Portal, Desktop App, or Mobile App.
2. Enter your email or username, then select Continue.
   
    
3. If you have previously registered with a Passkey, you will be redirected by default to the Passkey page:
   
    
4. Select Log in with passkey; then follow the on-screen instructions to complete the sign-in process.
   
    
   In this example, the user is redirected to Windows Hello Passkey. The option displayed depends on your device type, browser, browser features enabled, and the security features set up by your Network Administrators. 
5. Validate your Passkey; you will be redirected to the Vonage application.

Passkeys can be viewed and managed in the Admin Portal, Desktop App, and Mobile App.

The following describes and provides solutions for authentication and registration error messages you may encounter with Passkeys.

NOTE: If you select "I'll do it later" when prompted to set up a Passkey, this prompt is not displayed again until after you have successfully signed in 10 times or 7 days have elapsed since you chose to skip.