A) During account creation (New users)
After completing HSID account creation, users may be prompted to set up a passkey as part of onboarding. This enables passwordless sign-in for future access.
The setup experience depends on the device used:
- On mobile devices: Users set up a passkey directly on the same device using biometrics or a device PIN. The passkey is saved to the device’s password manager and can sync across devices.
- On desktop or tablet: Users are given two options:
- Set up Passkey on this device - Creates a passkey on the current device, stored by the browser or device password manager.
- Set up Passkey on your phone - Uses a QR code to create the passkey on a mobile device.
This allows users to choose where their passkey is stored, even if they start account creation on a desktop.
B) After sign-in (Existing users)
Existing HSID users may be prompted to add a passkey after a successful login if passkeys are enabled for that portal. This supports gradual adoption without blocking access for users who are not ready to switch immediately.
Sign-in with a passkey
Once a passkey exists, the login experience becomes significantly simpler.
- The user selects Sign in with Passkey
- HSID prompts the user to authenticate using:
- Biometrics (Face ID, fingerprint), or
- Device PIN
- No password or OTP is required
If the passkey exists on another device, HSID supports cross‑device login using a QR code. For example, a user signing in on a laptop can scan a QR code with their phone and complete authentication on the mobile device. This model keeps authentication secure while allowing flexibility across devices.
Note: Passkeys are account‑bound, not portal‑specific.