Signing in
A password, a provider or a passkey - and what a passkey is if you have never used one.
Your account signs in with an email and a password by default. You can also link Google, Microsoft or GitHub, send yourself a one-time sign-in link, or add a passkey.
What a passkey is
A passkey is a fingerprint, a face or a security key - whatever your phone, laptop or browser already asks for to unlock itself. There is nothing to type and nothing to remember: your device proves it is you, and that is the whole sign-in. It cannot be phished or reused on another site the way a password can, because it was never a secret you typed anywhere in the first place.
Adding one
Open Settings → Security and press Add a passkey. Name it after the device it is on - a phone and a laptop, say - so the list stays easy to read once you have more than one. We recommend adding at least two: a lost phone should never be the only way to get back in.
Signing in with one
On the sign-in page, press Sign in with a passkey, or just start typing your email - most browsers offer a saved passkey right there, before you type anything else. Confirm with your device, and you are in. No password, and no two-factor code either: a passkey already proves more than either one on its own.
Losing a passkey never locks you out
Your password still works until you choose to remove it. Removing your last way in - the only password, provider or passkey left on the account - is always refused, with a plain reason, from the dashboard and from the API alike. Going without a password entirely is allowed only once you have added a second passkey, so losing one is never the same as losing the account.
Confirming it's you again
A few actions ask you to prove it's you a second time, even mid-session: creating or revealing a live API key, changing a webhook's secret, or removing a passkey or your second factor. With a passkey this is one touch; without one, it is your password (and a code, if two-factor is on). Once you have confirmed, you are not asked again for a few minutes.