Account Security

Last updated

Protect your own Ploy account — sign in with Passkeys instead of a password, or use them as a second factor when signing in with email & password.

Sign in with Passkeys

Passkeys are a phishing-resistant alternative to passwords. Instead of typing a password, your device authenticates you using biometrics (Face ID, Touch ID, Windows Hello, etc.) or a hardware security key. Passkeys can't be leaked in a data breach and can't be phished.

Setting up a passkey

  1. Select your avatar at the bottom of the left sidebar, select Settings, then select Security.
  2. Under Passkeys, click Add a passkey.
  3. Follow your browser or device prompt to register the passkey (Face ID, Touch ID, Windows Hello, or a hardware key).
  4. Ploy names the new passkey with your account email. To tell your devices apart, rename it (see Renaming a passkey).

When you click Add a passkey, your browser and operating system may offer several password managers to store it — any of them will work. We recommend using an OS-native store like iCloud Passwords where available, as it enables Touch ID sign-in without any additional software.

Browser-integrated managers like 1Password may appear as the first option presented. Any is valid — if you'd prefer to use a different store, click the × to dismiss it and choose another.

After dismissing any browser extension popups, macOS/iOS/Windows/Android will present the Touch ID, Face ID, Optic ID, or biometric prompt to Save Passkey dialog — we highly recommend accepting this. If you're on Chrome or a Chromium-based browser and cancel out of the Touch ID prompt, you'll be offered additional storage options: iCloud Keychain, a phone, tablet, or security key, or Your Chrome profile. We don't recommend the Chrome profile as your only passkey — but adding one as a convenience alongside your OS passkey is fine.

Once registered, you can use the passkey on your next sign-in instead of your password. You can add multiple passkeys — one per device is recommended.

Signing in with a passkey

Once a passkey is set up, upon next sign-in you can use the Log in with a passkey button below the standard email/password form. Click it and your device will prompt you for biometric confirmation (Touch ID, Face ID, Windows Hello, etc.) — no password needed.

Passkey as a second factor (MFA)

When your account has at least one passkey, Ploy asks you to confirm with a passkey after every email and password sign-in. This means even a correct password alone isn't enough. Your registered device must also confirm the sign-in.

This protects you in the event that your password is compromised. An attacker who obtains your password still cannot access your account without also passing the biometric check on one of your enrolled devices.

  • Applies to: email and password sign-ins and SSO sign-ins, when your account has at least one passkey.
  • Not affected: Google sign-in, passkey sign-in, and email sign-in links.

To stop the passkey prompt, remove all your passkeys. Note that removing all passkeys may prevent you from performing sensitive operations if your Organization has mandated Enhanced Security at the organizational level.

Renaming a passkey

You can give each passkey a memorable name so it's easy to identify later — for example, the device or account it belongs to.

  1. Select your avatar at the bottom of the left sidebar, select Settings, then select Security.
  2. Find the passkey you want to rename and click the Edit (pencil) icon next to it.
  3. Type the new name in the text field that appears and confirm with the checkmark.
Renaming a passkey — an inline text field appears next to the passkey row with a confirm checkmark and cancel button

Removing a passkey

Open Settings, then Security, and select the trash icon next to the passkey you want to remove. If you already have a passkey, Ploy asks you to confirm with it first, unless you signed in within the last 5 minutes. We recommend deleting passkeys associated with devices or accounts you no longer control. Deleting all passkeys from your account may prevent you from performing sensitive operations in your Organization if your organizational owner has mandated Enhanced Security at the organizational level.

If you lose access to your passkeys, select Having trouble signing in? on the login page and enter your email. Ploy emails you a sign-in link that skips your password and passkey. Within 5 minutes of signing in, open Settings, then Security, remove the lost passkey, and add a new one. Resetting your password does not remove passkeys, so it does not get you past the passkey prompt.