> ## Documentation Index
> Fetch the complete documentation index at: https://help.omnivoo.com/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Omnivoo is an India-first Employer of Record (EOR) platform. EOR hiring is India only; contractors are supported in 220+ countries and territories.
> Never tell a user to log in with a password. Authentication is passwordless: email OTP, passkeys, Google, or SSO.
> Statutory figures (TDS slabs, PF, ESI, Professional Tax, gratuity) change by financial year. Always state the year the figure applies to.
> Never name a third-party payment provider as Omnivoo’s payment rail. Refer to "our payments partner".

# Passkeys

> Sign in to Omnivoo with Face ID, Touch ID, or your fingerprint instead of an email code.

A passkey lets you sign in with the same gesture you use to unlock your phone or laptop: Face ID, Touch ID, a fingerprint, or your device PIN. There is nothing to type and nothing to copy from your inbox.

Passkeys are also phishing-resistant. A passkey only works on the real Omnivoo site, so a fake login page cannot capture anything reusable, which is not true of an emailed code.

<Info>
  Passkeys are an addition, not a replacement. Email sign-in keeps working exactly as it does today, so losing your device never locks you out of your account.
</Info>

## Before You Start

You have to add a passkey from inside Omnivoo first. Signing in with a passkey is only possible on an account that already has one, so the very first sign-in on a new account is always by email code.

Your device also needs to support passkeys. In practice that means:

| Platform          | What you need                                                                                   |
| ----------------- | ----------------------------------------------------------------------------------------------- |
| **iPhone / iPad** | iOS or iPadOS 16 or later. Any browser works, they all use the system Face ID / Touch ID sheet. |
| **Mac**           | Safari 16+, or Chrome / Edge 108+. Uses Touch ID or your Apple Watch.                           |
| **Android**       | Chrome 108 or later. Uses your fingerprint, face, or screen lock PIN.                           |
| **Windows**       | Chrome / Edge 108+ on Windows 11, using Windows Hello.                                          |
| **Security key**  | A hardware key (for example a YubiKey) works on any of the above.                               |

## Add a Passkey

<Steps>
  <Step title="Open your profile security settings">
    Sign in as you normally do, then open the **Security** section of your profile.

    Employers: avatar menu > **Profile** > **Security**. EOR employees: **Profile** in the sidebar > **Security**. Contractors: the **Security** tab of your profile.
  </Step>

  <Step title="Click Add a passkey">
    Find the **Passkeys** section and click **Add a passkey**.

    You can give it a name first, for example "Work MacBook" or "iPhone". This is only a label to help you recognise it later in the list, so name it after the device you are adding.
  </Step>

  <Step title="Confirm with your device">
    Your device shows its own prompt: Face ID, Touch ID, a fingerprint, or your PIN. Confirm it.

    Omnivoo never sees your fingerprint or face. That check happens entirely on your device, and only a public key is sent to Omnivoo.
  </Step>

  <Step title="Done">
    The passkey appears in your list and can sign you in straight away.

    Omnivoo also emails you to confirm a passkey was added, and signs out your other sessions. That is deliberate: if someone else had access to your account, adding a passkey would otherwise be a silent way to keep it.
  </Step>
</Steps>

<Tip>
  If you have [two-factor authentication](/account/two-factor-auth) turned on, Omnivoo asks for a code from your authenticator app before adding the passkey. Adding a passkey grants long-lived access to your account, so it is treated as a security change rather than a routine setting.
</Tip>

## Sign In With a Passkey

There are two ways, and the first is usually quicker.

### From the email field

Click into the **Work email** field on the sign-in page. If you have a passkey saved for Omnivoo, your browser offers it in the same dropdown it uses for saved logins. Pick it, confirm with your device, and you are in. You never type your email address.

### From the button

Click **Sign in with a passkey** below the "or" divider on the sign-in page, then confirm with your device.

The first time you use this button, Omnivoo shows a short reminder that a passkey has to be added from your profile first. Choose **I have one, continue** to carry on, or **Not yet** to close it and sign in with your email code instead. The reminder only appears once.

<Info>
  Signing in with a passkey does not ask for a two-factor code, even if you have 2FA enabled. A passkey already combines two things: your device, and the fingerprint, face, or PIN that unlocks it. This matches how Google and GitHub treat passkeys.
</Info>

## Managing Your Passkeys

The **Passkeys** section of your profile Security settings lists every passkey on your account, showing:

* The name you gave it, or a default label
* **Synced** if it is backed up to your Apple, Google, or password-manager account and available on your other devices, or **This device only** if it lives solely on that one device
* When it was last used to sign in, and when it was added

You can add more than one, which is worth doing if you use several devices.

### Remove a passkey

Click **Remove** next to it and confirm. That passkey can no longer sign in to Omnivoo. Removing it also signs out your other sessions.

Removing a passkey from Omnivoo does not delete it from your device or password manager. If you want it gone completely, also remove it in your device's own passkey settings, otherwise it may keep appearing in the sign-in dropdown even though it no longer works.

<Warning>
  Removing your only passkey does not lock you out. Email sign-in is always available.
</Warning>

## Common Questions

**Do I still need my email code?**

Only when you sign in somewhere without a passkey, or if you remove them all. Keep your email address up to date either way, since it stays the fallback.

**I got a new phone. Do my passkeys move across?**

If your passkey shows **Synced**, yes: it comes across with your Apple or Google account, or your password manager. If it shows **This device only**, no. Add a passkey on the new device from your profile.

**Can I use a passkey on a device that is not mine?**

Yes, without leaving anything behind. Choose **Sign in with a passkey**, and your browser offers a QR code you scan with the phone that holds your passkey. You approve it on your phone and the borrowed computer never stores the passkey.

**Nothing happened when I clicked "Sign in with a passkey".**

Usually the device has no passkey for Omnivoo. Sign in with your email code and add one from your profile. For privacy reasons your browser deliberately does not tell websites whether a passkey exists, so Omnivoo cannot tell this apart from you dismissing the prompt.

**It says my passkey was not recognised.**

The passkey does not match any on your account. This normally means it was removed from Omnivoo, or was created on a different Omnivoo environment. Sign in with your email code and add a fresh one.

**Does Omnivoo see my fingerprint or face?**

No. Your biometrics never leave your device and are never sent to Omnivoo. Your device only confirms that the check passed, then uses a key it holds to sign in. Omnivoo stores nothing more than a public key.

## Related

* [Logging In](/account/login-guide) for email codes, Google sign-in, and two-factor authentication
* [Two-Factor Authentication](/account/two-factor-auth)
* [Session & Security](/account/session-management) for how long sessions last and how to sign out other devices