FurlPay Docs
Open App
  • Services & Availability
  • Quickstart
  • For AI Agents
  • Monorepo
  • API Routes
  • Authenticationupdated
  • Webhook Eventsupdated
  • Error Codesupdated
  • Rate Limitsnew
  • Configuration & Setupnew
  • Merchant Paymentsnew
  • Payroll & Payoutsnew
  • Agentic Payments (x402)updated
  • Agent Trust & Mandates (TAP)updated
  • CCTP Cross-Chainupdated
  • LI.FI Swapsupdated
  • FurlPay Travels (Travel MCP)updated
  • Solana Actions & Blinks
  • Settlement Workspacenew
  • FURL Tokennew
  • Claude Connectorupdated
  • AI Assistants
  • Circlenew
  • Ramp Providersnew
  • Telegram Mini Appnew
  • Stripe Crypto
  • Persona KYC
  • Regulatory status
  • Screening & Casesnew
  • Security Postureupdated
  • Signing & WebAuthnupdated
  • Help Center
  • Getting Started
  • KYC Verification
  • Passkeys & Biometrics
  • Privacy & Data Protection
  • Transaction Statuses
  • Gasless Transfers
  • Deposits & Withdrawals
  • Managing Virtual Cards
  • Freezing & Unfreezing Cards
  • Declined Transactions
  • SDK & API Support
  • x402 Monetization Basics
  • Booking Travel
  • Travel Refunds & Cancellations

Resources

  • Changelog
  • System Status
  • OpenAPI Spec
  • Community
  • GitHub
Docs/Help Center/Passkeys & Biometrics

Help Center

Securing Your Account with Passkeys & Biometrics

A passkey is a WebAuthn credential created by your authenticator and unlocked using the method configured on your device. It lets you sign in without typing a password.

How it actually works

When you enroll, your authenticator creates a public-key credential and FurlPay stores the public credential data used to verify sign-in. The authenticator signs a one-time challenge. WebAuthn binds the credential to the relying-party domain, which helps prevent a look-alike site from using it. The exact authenticator and unlock method depend on your device.

Enrolling

  • Web: Settings → Security → Add passkey, then follow your browser's prompt.
  • Mobile app: a production Android or iOS app is not currently distributed. Use the web sign-in flow.

Where biometrics gate actions

  • Signing in (one touch, replaces the email code).
  • Additional account actions may request step-up authentication where the route requires it.
  • A passkey does not enable a payment rail or replace wallet review and transaction confirmation.

If you lose a device

Your account is not locked to the passkey: sign in on a new device with your email code, then remove the old device's passkey in Settings → Security and enroll the new one. If you suspect the lost device is compromised, lock the account from Settings first and open a ticket.

Passkeys and your wallet keys are different things

The passkey authenticates you to FurlPay. It is not your wallet's recovery phrase, and you should never share a recovery phrase with anyone. The web signing path for some wallet actions uses a remote signing service; see Signing & WebAuthn for the custody boundary. Never type a recovery phrase into a FurlPay form.

Deeper technical detail lives in Signing & WebAuthn.

Did this page help?
Edit this page on GitHub

← Previous

KYC Verification

Next →

Privacy & Data Protection