Logging in with Passkeys
Overview
Passkeys let you sign in to Ramp without a password by using your device's built-in security — such as a fingerprint, face scan, or screen lock. Unlike passwords, passkeys cannot be phished, reused, or guessed.
Ramp supports passkeys for both signing in and verifying your identity during sensitive actions. Passkeys are stored in your password manager or on your device and never shared with Ramp — we do not have access to your biometric data.
Passkey setup and management are only available on the web version of Ramp, not the mobile app. However, passkeys you create on the web can be used to sign in from supported mobile devices. For a visual walkthrough, watch our passkey setup video.
Set up a passkey from settings
You can register up to 6 passkeys on your Ramp account. We recommend registering 2–3 across different devices or password managers so you always have a backup if one is unavailable.
- Go to Settings > Personal settings > Security .
- Select Configure a passkey .
- Choose an enrollment option:
- Add passkey — registers a platform authenticator such as Touch ID, Windows Hello, or a password manager (1Password, Google Password Manager, etc.).
- Use phone or security key — registers a cross-platform authenticator such as a YubiKey or a phone via QR code. This option is not available in Safari.
- Follow your device's prompts to complete enrollment.
- Name your passkey. Ramp pre-fills a suggested name based on your device or provider. You can change this to something you will recognize later.
Set up a passkey at sign-in
After you sign in with your password, Ramp may show a full-screen page titled Faster sign-in next time inviting you to create a passkey.
- On the upgrade page, select the option to create a passkey.
- If prompted, complete an MFA verification step.
- Follow your device's prompts to enroll the passkey.
- Name the passkey when prompted.
You can dismiss this page if you prefer not to set up a passkey at that time.
Sign in with a passkey
On the Ramp sign-in page, select the passkey option. Your browser prompts you to choose a passkey and verify with your device's security (fingerprint, face scan, PIN, or security key). Signing in with a passkey replaces the need for a separate password and MFA step.
Verify your identity with a passkey
Some actions in Ramp require additional identity verification (step-up verification). When this happens, Ramp asks you to confirm your identity using one of your registered MFA methods, which can include a passkey.
If you already signed in with a passkey, Ramp asks for a different verification method for step-up — you cannot reuse the same factor you used to sign in. This is why registering multiple passkeys or keeping another MFA method active is important.
If you are unable to access your passkey during a verification prompt, select Still having trouble? Recover your passkey. to begin the account recovery process.
Manage your passkeys
Go to Settings > Personal settings > Security. Under your passkeys, you can see each passkey's name, provider, creation date, and last-used date.
Rename a passkey
Select a passkey and choose Rename. Use descriptive names (such as "Work laptop" or "YubiKey backup") so you can identify each passkey later.
Remove a passkey
Select a passkey and choose Remove. You are asked to confirm: "Remove passkey? Removing your passkey called [name] cannot be undone." After removal, attempting to use that passkey produces the error: "Failed to authenticate: that passkey is not registered on Ramp."
Troubleshoot passkey issues
Passkey not working on a new device
If your passkey was stored in a platform authenticator (such as Touch ID or Windows Hello), it may not be available on a different device. Try one of the following:
- Use a passkey stored in a cross-platform password manager (1Password, Google Password Manager) that syncs across devices.
- Use the Use phone or security key option at sign-in to authenticate via QR code from a phone that has your passkey.
- Sign in with your password and another MFA method, then register a new passkey on the new device.
Passkey stored in an old password manager
If you switched password managers, your passkeys from the previous one may no longer be accessible. If password sign-in is available for your account, sign in with your password and another MFA method, then register new passkeys in your current password manager. If password sign-in is not available (your organization requires passkeys), start the account recovery process to regain access and re-register your passkeys.
Safari limitations
Safari does not support the Use phone or security key option. If you need to register a security key (such as a YubiKey), use Chrome or Edge instead.
"Screen lock required" error
Your device does not have a screen lock enabled. Passkeys require your device to be secured with a PIN, fingerprint, or face unlock. Enable a screen lock in your device settings and try again.
Bluetooth issues with cross-device authentication
If you are scanning a QR code to authenticate from a phone, make sure Bluetooth is enabled on both devices. The phone and computer communicate over Bluetooth to complete the verification.
Browser extension conflicts
Password manager extensions (1Password, Bitwarden, etc.) may intercept the browser's passkey prompt. If you see an unexpected dialog or the flow does not complete, check whether an extension is handling the prompt, or temporarily disable it to use the browser's built-in passkey manager.
"Your browser doesn't support passkeys"
Update your browser to the latest version. Passkeys require recent versions of Chrome, Safari, Edge, or Firefox.
Lost access to all passkeys
If password sign-in is available for your account, sign in with your password and another MFA method, then go to Settings > Personal settings > Security to register new passkeys. If you cannot sign in at all, use Ramp's account recovery process to reset your MFA methods.
Frequently asked questions
How many passkeys can I set up?
Up to 6 per Ramp account.
Does Ramp store my biometric data?
No. Your device uses biometrics locally to unlock the passkey and sends only an opaque cryptographic key to Ramp.
What devices support passkeys?
- Apple: iOS 16+, iPadOS 16+, macOS Ventura or later.
- Google: Android 9+ (with Google Play Services), ChromeOS.
- Microsoft: Windows 10+ with Windows Hello enabled, using Edge or Chrome.
Why did Apple automatically create a passkey for my Ramp account?
Apple's password management system may automatically opt you into passkey creation. You receive a confirmation email from Ramp when this happens. To remove it, go to Settings > Personal settings > Security, find the passkey labeled "Apple Passwords," and select Remove.
Can my admin require passkeys?
Admins cannot independently require passkeys for specific roles. Passkey availability is tied to whether password-based sign-in is enabled for your organization. Admins can review MFA settings for more details.
Why am I only seeing passkeys for verification?
You are likely performing a high-security action or your admin has configured passkeys as a required verification method. If you cannot access your passkey, try a different MFA method or start the account recovery process.
Why should I use passkeys instead of a password?
Passkeys are a FIDO credential resistant to phishing, always strong, and faster to use than a password plus OTP. If your business does not use SSO, passkeys are the most secure way to sign in to Ramp.