Skip to main content

Account Security & Passkeys

Manage your account security settings, including adding passkeys for passwordless authentication.

Overview​

RepoRisk supports passkeys as a secure, passwordless authentication method. Passkeys use biometric authentication (fingerprint, face recognition) or device-based credentials (security keys, device PINs) to let you sign in without a password.

Benefits of passkeys:

  • Phishing-resistant — Passkeys are bound to the specific website, so they can't be used on fake sites
  • No passwords to remember — Sign in with your fingerprint, face, or security key
  • Cross-device support — Use passkeys synced across your devices (e.g., iCloud Keychain, Google Password Manager)

Adding a Passkey​

Step 1: Open Your Account Settings​

  1. Log in to your RepoRisk account at https://app.canirunthat.com
  2. Click your account name (or email address) in the upper-right corner of the page
  3. Click "Manage Account" from the dropdown menu

Step 2: Navigate to Security Settings​

  1. In the account management dialog that appears, click "Security" in the left sidebar or tab list

Step 3: Add a Passkey​

  1. In the Security section, click "Add a passkey"
  2. Your browser will prompt you to create a passkey using your device's authentication method:
    • Fingerprint (Touch ID, Windows Hello fingerprint)
    • Face recognition (Face ID, Windows Hello face)
    • Security key (USB/NFC hardware key such as YubiKey)
    • Device PIN (Windows Hello PIN)
  3. Follow your browser's prompts to complete passkey registration
  4. Once added, your new passkey will appear in the list of registered passkeys

Step 4: Sign In with Your Passkey​

After adding a passkey, you can use it to sign in:

  1. On the login page, select the passkey sign-in option
  2. Your browser will prompt you to authenticate with your registered passkey
  3. Verify with your fingerprint, face, or security key
  4. You'll be signed in without entering a password

Managing Passkeys​

From the Security section of your account settings, you can:

  • View registered passkeys — See all passkeys associated with your account
  • Remove a passkey — Delete a passkey you no longer want to use
  • Add additional passkeys — Register multiple passkeys for different devices

Troubleshooting​

Passkey Option Not Available​

  • Ensure your browser supports passkeys (Chrome 67+, Firefox 60+, Edge 18+, Safari 13+ (desktop) / 14.5+ (iOS))
  • Make sure your device has a compatible authenticator (fingerprint reader, face recognition, or security key)

Passkey Registration Fails​

  • Check that your browser has permission to access your device's authenticator
  • Try a different authentication method (e.g., security key instead of fingerprint)
  • Ensure you're using a supported browser and operating system

Cannot Sign In with Passkey​

  • Verify the passkey is still registered in your account security settings
  • If using a synced passkey, ensure your device is signed into the same cloud account (Apple ID, Google account) used to create the passkey
  • Try signing in with your password and re-registering the passkey