Published
Sign in with a passkey — no password, no code
A passkey is registered once in the profile; after that signing in is a confirmation on your device — no password, no app code. A computer can be signed in from the phone.
Signing in to a working system happens several times a day, and every time it is a password plus a code from an app. There is now a shorter way: a passkey — a sign-in under the WebAuthn standard, where the device itself confirms who you are.
The key is registered once, in your personal profile. What confirms you is what the device already has: Face ID, a fingerprint, Windows Hello or a hardware key. From then on signing in is a single action — no password to type and no code to fetch from an app, because the key takes the place of the second factor as well.
"Sign in from your phone" is meant for the case where the key is registered on the phone and you are sitting at a computer:
- on the computer's sign-in screen you choose to sign in with a passkey;
- the browser shows a QR code;
- you scan it with the phone and confirm there the way you usually unlock it;
- the computer signs in.
The QR code and the confirmation are handled by the browser itself, under the standard. Lidin stores no secret beyond the public part of the key.
The profile holds the list of keys: what is registered, how to add one and how to remove one. A key is tied to the office's address — your subdomain — so a key from one office does not open another.
The password and the app code stay where they were. The key is an extra, convenient way in, not a repeal of the office's security policy: anyone who prefers the old way carries on with the old way. Registering a key and using it go into the access log like any other action — the key itself, of course, is not written there.
Want to see this on your own office's inquiries?