Sign in with a passkey, step by step

For everyone who signs in to the plycdn dashboard. A passkey lets you sign in with your fingerprint, face, screen lock, phone or a security key instead of typing your password. Your password still works, so you can never be locked out by adding one. A passkey can't be guessed or typed into a fake site, and plycdn never holds anything that would let someone else sign in as you. This page takes you from adding your first passkey to checking that it works.

You need: a dashboard account and a device or security key your browser can use for a passkey: a recent version of Chrome, Edge, Safari or Firefox on a computer or phone with a fingerprint reader, face unlock or a screen lock.

1How it works

You add a passkey once, on each device or security key you want to sign in with. It stays on that device (or in the passkey store your phone or computer keeps for you).
At the sign-in page you choose the passkey and your device asks for your fingerprint, face or screen lock. No email, no password.
Your password is still there. Use it on any device that has no passkey, and to confirm it's you when you add one.

Passkeys work on plycdn.com only, the same address you use for the dashboard. They are for people signing in: your API keys and SDKs are unchanged.

2Add a passkey

In the dashboard open Account → Sign-in & security. (On the Overview page, Get started has a Sign in with a passkey row until you have one. From Profile & organization there is a link to the same page.)
Choose Add a passkey.
Confirm it's you: enter your password and choose Continue, or choose Use a passkey instead if you already have one. This stays confirmed for 5 minutes.
Give it a name you will recognise, such as Work laptop or My phone.
Choose Create passkey. Your device asks for your fingerprint, face or screen lock.

The passkey appears in the list with the date you added it and Last used. You can have up to 20. You get an email when a passkey is added, so you notice if it wasn't you.

3Sign in with it

On the sign-in page (plycdn.com/app/login):

Click the email field. Your browser suggests your passkey: pick it and confirm with your fingerprint, face or screen lock.
Or choose Sign in with a passkey and pick one from the list your browser shows.

On a computer with no passkey, choose Sign in with a passkey, then use your phone: your browser shows a code to scan with the phone that holds the passkey. Or use your password.

4Rename or remove a passkey

In Account → Sign-in & security, each passkey has Rename and Remove. Neither asks you to confirm it's you. Removing a passkey stops that device signing in with it; you get an email telling you. Removing your last passkey is fine: your password still works.

5Lost a device, or a new phone

A passkey kept in your phone's or computer's own passkey store moves with you to a new device signed in to the same account there.
A passkey on a security key or on a device you no longer have: sign in with your password, add a passkey on the new device, and Remove the old one.

6If you forget your password

Reset it from the sign-in page as before. Your passkeys keep working. A password reset signs you out everywhere, so anyone still signed in with the old password is signed out. After every password reset you get a "password changed" email, so a reset you didn't ask for gets noticed.

7Stay signed in, or sign out everywhere

While you work in the dashboard you stay signed in, up to 12 hours after you signed in; then the sign-in page asks you to sign in again. If you step away for a while you are signed out sooner.

To end your sign-in on every device at once, for example after using a shared computer or losing a laptop, open Account → Sign-in & security and choose Sign out everywhere, then confirm. It ends your session on every device, including this one, and you go back to the sign-in page. Signing in again afterwards works as usual. It appears in Developers → API keys → Change history as Signed out everywhere (sessions.ended in the account audit). Your API keys keep working. Removing a passkey does the same on every other device: you stay signed in where you removed it, and everywhere else you sign in again.

8For your team

Each person adds their own passkeys; nothing is set for the whole organization, and nobody can add or remove a passkey for someone else. Changes appear in Developers → API keys → Change history as Added passkey "…", Renamed passkey "…" and Removed passkey "…" (passkey.added, passkey.renamed, passkey.removed in the account audit). Sign-ins with a passkey (Signed in with a passkey, passkey.used) are listed too: choose Show sign-ins. A member removed from the team keeps their passkeys, like their password, but has no organization to reach.

9From code

There is none. Passkeys are for people signing in to the dashboard: no API key or SDK can add, use or remove them. Passkey changes and sign-in times appear in your organization's change history, which admin API keys can read (the account audit). Nothing else about them is exposed, and nothing changes in the Integration guide or the SDK guides. Your servers keep using API keys.

10Check it works

Add a passkey as above. It shows Last used: Never.
Sign out, then sign in with the passkey (the email field's suggestion or Sign in with a passkey).
Open Account → Sign-in & security: Last used now shows a moment ago.
Open Developers → API keys → Change history and choose Show sign-ins: Added passkey "Work laptop" (with the name you gave it) and Signed in with a passkey are there.

11Errors and fixes

What you see	Code	What to do
"That passkey wasn't accepted. Sign in with your password, or try another passkey."	`passkey_not_recognized` (401)	The passkey was removed, belongs to another site, or your device didn't confirm it. Sign in with your password. If it was removed, delete it from your device or browser.
"That took too long. Choose your passkey again."	`passkey_challenge_expired` (400)	The request waited more than 5 minutes, or was used twice (two tabs). Start again.
"That didn't confirm it's you. Check your password, or try your passkey again."	`reauth_failed` (401)	Check your password, or try your passkey again.
"Confirm it's you first: enter your password or use one of your passkeys."	`reauth_required` (403)	Adding a passkey needs your password or an existing passkey, within the last 5 minutes. Confirm again, then save.
"That passkey couldn't be added. Please try again."	`passkey_registration_failed` (400)	Your device didn't finish or the browser refused. Try again, or use another device or a security key.
"That passkey is already registered. Use a different passkey."	`passkey_already_registered` (409)	That passkey is already set up, on your account or another. Use a different one, or sign in with it instead.
"This device already has a passkey for your account. Add one from another device, or remove the old one first."	(shown by your browser's refusal)	The device already holds a passkey for this account. Sign in with it, add one from another device, or Remove the old one first.
"You already have 20 passkeys. Remove one before adding another."	`passkey_limit_reached` (409)	Remove one you no longer use, then add the new one.
"You have no passkeys yet. Confirm with your password instead."	`passkey_not_found` (404)	You have no passkey to confirm with, or it was already removed (perhaps in another window). Reload the list, or use your password.
A name is refused	`validation_error` (422)	Names are 1 to 64 characters with no control characters.
"Your session has ended. Sign in again."	`session_ended` (401)	Your sign-in reached 12 hours, or you chose Sign out everywhere or reset your password. Sign in again.
Too many attempts	`rate_limited` (429)	Wait for the `Retry-After` seconds.

The button isn't there, or "Add a passkey" is greyed out. Your browser or device doesn't support passkeys. Use a recent browser, or your password.

Passkeys on a work computer. Some organizations turn passkeys off on managed computers. Use your password there, or a security key if your IT team allows it.