What is a passkey?
A passkey is a secure authentication protocol that enables faster, easier, and more secure verifications across your devices. The cryptographic key pair is generated and stored securely on your device, allowing for anti-phishing capabilities and providing enhanced account protection.
The Passkeys feature in the Crypto.com Exchange App lets you log in and verify your transactions without the need for email One-Time Passwords (OTPs) or 2-Factor Authentication (2FA) codes.
Passkey Setup
How do I create a passkey?
Please note that your passkeys are shared between your Crypto.com Exchange and Crypto.com App account.
First, ensure that your device supports iOS 16+ or Android 9+. Then, follow these steps to create a passkey:
Go to Profile > Security
Follow the steps below, depending on whether you are creating your first passkey across your accounts:
If you are creating your first passkey:
Tap Manage next to Passkeys
You will see the Passkeys landing screen. Tap the Create Passkey button.
Complete verification using 2FA if it is set up. If it is not, you will be prompted to verify using email OTP.
If you are creating a subsequent passkey:
Tap Manage next to Passkeys
Tap + on the top-right corner of the screen
Complete verification using an existing passkey
Choose where to save your passkey to:
On your current device:
Tap Continue and complete the authentication process
On another device:
Tap Other Options > iPhone, iPad, or Android device
Use the other device to scan the QR code and complete the authentication process (iOS only)
On a security key:
Tap Other Options > Security Key
Insert your security key and follow the on-screen instructions (iOS only)
You’ll see an in-app message once your passkey is successfully created
How many passkeys can I add to my account?
You can set up a maximum of 10 passkeys between your Crypto.com Exchange and Crypto.com App account.
Once you have reached this limit, you must delete a passkey before adding a new one.
Using Your Passkey
How do I use my passkey?
When using your passkey on an iOS device, you will be prompted to verify yourself with Face ID, Touch ID, or your passcode.
On an Android device, this will be done via a face or fingerprint scan, PIN, or pattern, depending on how you have set up your screen lock.
Can I still use my passkey if I have changed my device?
As your passkeys are backed up in iCloud Keychain for iOS or Google Password Manager for Android, they are available on devices that are signed into the same Apple or Google account.
Alternatively, you can choose the option of using a passkey from another device, which will show a QR code for you to scan on the device that has the passkey. You can then use your old device to scan the QR code and complete the authentication process.
Can I switch to other verification methods even if I have a passkey set up?
Biometric ID will be your default verification method if it has been set up. If not, Passkeys will be your default verification method.
If you wish to switch to another verification method, you can dismiss the passkey verification pop-up and choose another method in the Verification Options menu.
Passkey Management
How do I remove a passkey?
Please note that you can remove passkeys created in the Crypto.com Exchange or Crypto.com App from either account.
You are advised to keep at least one passkey for enhanced account protection.
Follow these steps to remove a passkey:
Go to Profile > Security
Tap Manage next to Passkeys
Tap [...] next to the passkey you wish to remove
Tap Remove > Confirm Removal
Complete verification to finish removing your passkey
How do I rename my passkey?
Follow these steps to rename a passkey:
Go to Profile > Security
Tap Manage next to Passkeys
Tap [...] next to the passkey you wish to rename
Tap Edit
Input the new name and tap the Save button when you’re ready
What are the benefits of saving my passkey on a security key?
A hardware security key like YubiKey is a passkey-compatible cryptographic hardware token that enhances your account security.
Unlike common passkeys that are synchronised to your Apple or Google account, passkeys stored in a security key never leave the hardware itself, making them immune to digital theft. The only potential breach is through physical theft.