Promote passkey
Passkey promotion encourages customers to register a passkey during registration, login, or password change. Promotion screens are available only for applications with the passkey Adaptive Access configuration enabled.
To configure passkey promotion, go to Policies → Self-service in the Admin Console, select a policy, and open the Self-service functionality tab. Configure the settings under Promote passkey.
For an overview of passkeys and related authentication options, see Passkeys.
These settings allow you to control when and where customers are prompted to register and use passkeys as a passwordless authentication method.
- Show passkey promotion during registration:
- When enabled, this option displays a prompt encouraging customers to set up a passkey as part of the registration process. This provides an opportunity for customers to adopt passkeys from the start, offering a more secure and seamless authentication method as they create their accounts.
- Show passkey promotion during password change:
- This setting displays a passkey setup prompt when customers go through the password change process. Promoting passkey registration at this point encourages customers to move away from traditional password-based authentication in favor of passkeys, especially when they are already considering security during a password reset or update.
- Show passkey promotion during login:
-
Display the passkey setup prompt during interactive login when the customer does not have a registered passkey. If the customer does not register a passkey, the prompt can be displayed again based on the configured cooldown behavior.
Once the customer registers a passkey, the promotion is no longer displayed during subsequent logins.
-
- Disable passkey promotion cooldown:
- Enable this option to show the login promotion only once to each eligible customer. When disabled, the Cooldown period determines when the promotion can be displayed again.
- Cooldown period:
- Specify the number of days before an eligible customer can see the passkey promotion again. The default cooldown period is 30 days.
If a customer skips or dismisses the passkey promotion, the cooldown period starts from that interaction. If the customer closes the login flow without interacting with the promotion, the cooldown is not updated and the promotion can appear during the next login.
Changes to the cooldown period apply to future logins.

Passkey promotion steps in the registration, login, and password change flows on Mac OS
Updated 17 days ago

