Using passkeys with Stash
A passkey is a passwordless sign-in credential tied to a specific device or password manager. Use Face ID on iPhone, Touch ID or Windows Hello on a laptop, a hardware key, or a password manager like 1Password or Dashlane to sign in to Stash without typing anything.
Passkeys are the fastest and most secure way to sign in. Stash supports them as one of four sign-in methods (the others: email code, magic link, Continue with Google).
Where to manage passkeys
Click your profile picture at the bottom of the sidebar.
Click Manage account.
Open the Security tab.
You'll see a Passkeys section listing all your existing passkeys, including when each was created and last used.
Adding a passkey
Open Account → Security.
Click Add a passkey.
Your device or browser prompts you to register a passkey. The exact prompt depends on what you're using:
iPhone / iPad — Face ID or Touch ID
Mac with Touch ID — fingerprint scan
Windows — Windows Hello (PIN, fingerprint, or face)
Android — fingerprint or screen lock
Hardware key — tap the key
Password manager (1Password, Dashlane, Bitwarden, etc.) — saves the passkey to your vault
Give the passkey a name so you recognize it later. Examples: iPhone, Work laptop, Dashlane.
Done — the passkey appears in your Passkeys list.
You can add as many passkeys as you want — there's no limit.
Naming your passkeys
The name is set by you, not auto-detected from your device or password manager. Use names that tell you which passkey is which when you have several. Common conventions:
Device-based: iPhone, Personal Mac, Work laptop
Manager-based: 1Password, Dashlane, Apple Keychain
Both: iPhone — 1Password
Clear names matter when you remove old passkeys (e.g., after replacing a phone) — you want to know which one to remove without guessing.
Signing in with a passkey
On the sign-in screen, your browser or device automatically suggests using the passkey if one is available. Approve with biometrics or your security key, and you're in.
If a passkey isn't available on the device you're signing in from, just use email code, magic link, or Continue with Google instead. See I can't sign in.
Removing a passkey
Open Account → Security.
Click the ⋯ menu next to the passkey.
Choose Remove.
The passkey can no longer be used to sign in to Stash. Other passkeys you have remain active.
What to do if you lose a device
If you lose a device that has a passkey saved on it:
Sign in to Stash from another device using a different method (email code, magic link, or Google).
Open Account → Security.
Remove the passkey for the lost device.
Also check Active devices — sign out the lost device's session if it's still listed.
Are passkeys safer than passwords?
Yes. Passkeys can't be phished, reused, or leaked in a data breach. They're tied to your physical device or password manager and require you to physically authenticate (biometric or PIN) to use. The industry consensus is that passkeys are the strongest form of authentication available today.
Stash never used passwords in the first place, but passkeys are still meaningfully more secure than email codes alone — there's nothing to intercept or guess.
Related articles