What is Passkey and how to enable it?

What is Passkey (2FA)?

Passkey is a unique identifier that is used to confirm the legitimacy of your actions within the system (exchange). 

This identifier is another method for two-factor verification and functions on the same level as the familiar TOTP (Time-based One-Time Password) authentication, which works with Google Authenticator or another similar application.

Each device or platform that can act as an authenticator generates two keys: private and public.

  • The public key is a unique identifier of the authenticator and is used to identify the key within the service on which it will be used, in our case on the WhiteBIT exchange;
  • The private key is stored exceptionally in the authenticator and is not available to anyone; used for confirmation.

We highly recommend enabling two-factor authentication (2FA) to ensure security and prevent any potential unauthorized access to your account.

What can be used as a passkey?

Various devices, platforms, software can be used as a passkey:

Devices on platforms:

  • Android, starting from version 9.0;
  • iOS, starting from version 17.4;
  • iPadOS, starting from version 17.4;
  • macOS, starting from version 13.0.

Browsers:

  • Chrome;
  • Firefox;
  • Safari;
  • Opera.

Software:

  • Password managers, for example: 1Password, Bitwarden and others.

Physical keys:

  • Yubico devices and others.

Other:

  • iCloud.

    Please note: we recommend using physical keys if possible, as they are the most secure.

Also, some of the software or devices may not work correctly.

If you encounter any problems while using passkey, for example, you set up passkey, but it does not work, please contact our support team using any method convenient for you from the list at the bottom of this article.

How to set up a passkey in the web version of our exchange?

To enable it in the web version, follow a few simple steps:

1. Log in to your WhiteBIT account and go to Account Settings and Security;



2. Select the "Two-Factor Authentication" section by clicking on the "Edit" button;



3. Click "Manage Passkeys" and then "Continue";



4. Register a passkey by selecting one of the authentication methods;



5. Confirm your passkey with the chosen method.



Please note: creation of passkeys is limited to 5 units at a time, and it is possible to create multiple keys using one method for authentication.

How to disable the passkey in the web version of our exchange?

After you have connected the passkey, you will be able to disable it at any time.

To disable the passkey, please follow the instructions below:

1. Log in to your WhiteBIT account and go to Account Settings and Security;

2. Click on the red button to the right of the "Rename" button to disable the passkey. You will need to confirm the deletion using your passkey or TOTP.

Please note: to disable the passkey with TOTP, you should wait a few minutes or close the confirmation window via the access key.

By following these steps, you will disable the passkey. To set up the passkey again, you can always use our instructions.

Passkey (2FA) features

Passkey can be used for the same functionality as TOTP:

  • Authorization;
  • Withdrawal of funds (including P2P Express and withdrawal to a WB card);
  • WB-code creation;
  • Creating and deleting an API key and webhook;
  • Turning the Whitelist on and off, adding and removing an address from the Whitelist;
  • Adding and removing anti-phishing code;
  • Linking and unlinking a web3 wallet;
  • Buying a Gift Card;
  • Account deleting.

You can also use passkey to verify the addition and removal of TOTP, and vice versa, TOTP to add and remove passkeys.

Please note: with the passkey enabled, when using the functionality from the list above (except for withdrawal to a WB card), a confirmation code from email will not be requested.

Logging in to an account using a Passkey

Before logging into your account using a Passkey, it is important to remember that you will need to create a different passkey for each device from which you plan to log in. In other words, a passkey is only created for the specific platform or device from which you will be logging into your account. This means that if you try to use your passkey on a different device or browser, you may need to re-authenticate or create a new passkey. 

 

Please note: an exception is, for example, Apple devices with iCloud synchronization. In this case, a common Passkey can be created for all devices connected to your iCloud and you don't have to create separate passkeys for each device, such as a phone and a laptop. 

 

Now let's take a look at what this looks like in practice: 

If a Passkey has already been created on your account (in this case, the access key was created in the web version of our exchange), you will see a biometric authentication window after entering your login details. 

After successfully passing this step, you will be able to log in to your account. For a mobile device, follow the same steps. Since your devices are linked to iCloud, the Passkey is automatically transferred to your second device, allowing you to successfully log into your account after recognizing the biometrics.

What will happen if you change your password or completely disable 2FA on your account?

If you change your password or completely disable 2FA (both types: Passkey and TOTP), certain functionality will be blocked for 72 hours. This functionality includes withdrawal of funds (including P2P Express), creation of WB Codes, and purchase of Gift Cards. 

You will also receive an email notification informing you of account changes made and alerting you to the restrictions within 72 hours.

If 2FA is turned off and then turned back on in a moment, the above features will still be limited for 72 hours.

Our top priority is ensuring the security of our users' data and funds.

What should I do if I lose access to my two-factor authentication application?

If you have lost access to 2FA, be sure to contact our support team using any method convenient for you from the list below.

Support

In case of any questions related to your account, trading or exchange functionality, you can:

  • Leave a request on our website;
  • Write to our support e-mail: support@whitebit.com;
  • Write to the chat using the button in the lower right corner of the screen (in the upper right corner of the WhiteBIT app, click ).

Was this article helpful?

57 out of 62 found this helpful