- Archive
- /
- Account & Security
- /
- Passkeys and WebAuthn
Passkeys and WebAuthn
Learn how passkeys use the WebAuthn standard to let you sign in to Foreman securely with biometrics or a hardware key instead of a password.
Passkeys use the WebAuthn standard to let you sign in to Foreman using biometrics (fingerprint, face recognition), a hardware security key, or your device's screen lock -- without needing to type a password.
Passkeys are only available for users who have a password-based account. If you sign in exclusively through Autodesk, passkey management is not shown in your account settings.
What Is a Passkey?
A passkey is a cryptographic credential stored on your device or hardware security key. When you sign in, your device proves your identity without transmitting a password over the network. Passkeys are:
- Phishing-resistant -- they are bound to the Foreman domain and cannot be used on look-alike sites.
- Convenient -- sign in with a fingerprint, face scan, or PIN instead of typing a password.
- Synced across devices -- platform passkeys (e.g. iCloud Keychain, Google Password Manager) can follow you across your devices automatically.
Registering a Passkey
- Navigate to Manage Account from the user menu.
- Select Passkeys from the sidebar.
- Click Register a new passkey.
- Your browser will prompt you to choose an authenticator -- this could be your device's biometric sensor, a hardware security key (e.g. YubiKey), or a passkey synced from your phone.
- Complete the verification step (scan your fingerprint, confirm with Face ID, tap your security key, etc.).
- Give the passkey a friendly name (e.g. "MacBook Pro", "YubiKey 5") so you can identify it later.
Signing In with a Passkey
- On the Foreman sign-in page, click Sign in with a passkey.
- Your browser will present the available passkeys for this site.
- Select your passkey and verify with your biometric or PIN.
- You will be signed in without entering a password.
Register passkeys on multiple devices so you always have a backup way to sign in. A hardware security key stored in a safe place makes an excellent recovery option.
Managing Your Passkeys
From the Passkeys page in your account settings you can:
- View all registered passkeys with their names and registration dates.
- Rename a passkey to update its friendly name.
- Remove a passkey you no longer use or have access to.
Removing a passkey does not delete it from your device -- it only removes the server-side registration. You may also need to delete the passkey from your device's credential manager.
Browser and Device Support
Passkeys are supported on most modern browsers and operating systems, including Chrome, Safari, Edge, and Firefox on Windows, macOS, iOS, and Android. If your browser does not support WebAuthn, the passkey option will not appear on the sign-in page.