Faq
security
Password vs password-plus-passkey vs passkey-only -- which am I using?
Three sign-in modes. You are always in control of which one applies to your account.
Quick Steps
- 1 Password only (default): no passkey enrolled.
- 2 Password + passkey MFA (after enrollment): sign in with password, then tap your passkey.
- 3 Passkey only (opt-in): skip the password step entirely. Enable from Security (Passkeys).
- 4 You can switch between modes at any time from the Security page.
- 5 Password is always the fallback, even in passkey-only mode.
Bizity supports three sign-in modes. Your account picks automatically based on your setup:
- Password only. The default when you have never enrolled a passkey. Nothing changes from how you signed in before.
- Password + passkey MFA. After you enroll your first passkey, Bizity asks for both -- first your password, then a tap on your registered device. Strongest default.
- Passkey only. Opt in from Security (Passkeys). Type your email, skip the password, tap your device. Password still works as a fallback via the standard login page.
You can switch modes whenever you want. Disabling passwordless always works. Enabling passwordless requires at least one active passkey.
If Bizity ever needs to require passkeys site-wide for all users (escalated threat response), an admin flag does that -- you would see a grace-period banner and a requirement to enroll before continuing.