Passkeys: sign in without a password

Sign in with Face ID, Touch ID, Windows Hello or your device PIN: add a passkey, sign in with it (no 2FA code), and rename or remove it on the Security page.

What's a passkey?

A passkey lets you sign in with your device's own unlock — Face ID, Touch ID, Windows Hello or your device PIN — instead of typing a password. The secret key never leaves your device and only works on MarketplaceHub, so a passkey can't be phished, guessed or reused. It's the fastest and safest way into your account.

A passkey is both factors at once, so there is no code to type.

Add a passkey

There are two ways in:

Right after signing in — on a device that supports passkeys, MarketplaceHub offers "Sign in faster with a passkey" after a password sign-in. Give it a name (e.g. MacBook Touch ID), click Set up passkey and confirm with your device unlock. Not now skips for a couple of weeks; tick Don't ask me again and we won't offer again.
Any time from the Security page (user menu → Security) — the Passkeys section has an Add a passkey button.

Your device may offer to sync the passkey through iCloud Keychain or Google Password Manager — synced passkeys carry a Synced badge and work on your other devices too. You can register up to 10 passkeys, so add one per device you sign in from.

Signing in with a passkey

On the sign-in page, click Sign in with a passkey — or pick your passkey straight from the email field's autofill suggestions — then confirm with your device unlock. That's it: no password, and no two-factor code either. A passkey already proves both your device and your identity, so the 2FA prompt is skipped on passkey sign-ins (it keeps protecting your password sign-ins).

Rename or remove a passkey

The Passkeys section of the Security page lists each passkey with its name and when it was added. Rename edits the name in place. Remove stops that passkey from signing in — removal is a sensitive action, so if your sign-in is more than a few minutes old you'll be asked to sign in again first, and nothing is removed until you confirm on the page afterwards.

Removing your only passkey simply means you'll sign in with your password (and 2FA, where enabled) again.
Removing a passkey here doesn't delete its copy from your device or password manager — tidy that up in your device's own passkey settings.

If your device doesn't support passkeys

Nothing changes for you: the passkey button only appears on browsers that support it, and password sign-in (plus connected Google or Amazon accounts) always remains available. Passkeys are optional — just faster and safer where your device allows them.