A passkey lets you sign in to PremierVPN with your fingerprint, face or device PIN instead of typing your password. It's quicker, and it's much harder for anyone to steal or misuse.
How a passkey works
When you add a passkey, your device makes a pair of keys:
- A private key stays in your password manager (iCloud Keychain, Google Password Manager, 1Password and so on). It never leaves it, and we never see it.
- A public key is sent to PremierVPN and saved with your account.
When you sign in, we send your device a one-time challenge. Your device asks for your fingerprint, face or PIN, then uses the private key to sign the challenge, and we check the signature with the public key.
Your fingerprint or face never leaves your device. It only unlocks the passkey on your own phone or computer.
Why passkeys are safer than a password
- Nothing to steal from us: we only hold the public key, which can't be used to sign in.
- Fake sites can't use them: a passkey only works on premiervpn.net, so a look-alike phishing page gets nothing.
- Nothing to guess or reuse: every passkey is unique to PremierVPN and to your account.
Passkeys and two-factor authentication
Signing in with a passkey counts as both steps: something you have (your device) and something you are or know (your fingerprint, face or PIN). So you aren't asked for a two-factor code after signing in with a passkey.
If you sign in with your password, the two-factor screen offers Use a passkey instead, so you can use a passkey instead of typing the code.
Add a passkey
- Go to Settings › Passkeys.
- Choose Add passkey and confirm your portal password. If you sign in with Google or Apple, sign in with them again first.
- Confirm with your fingerprint, face or PIN when your device asks.
The passkey is named after your device (for example "Passkey on Mac"), and you can rename it. Under each name you'll see where it's saved, such as iCloud Keychain or Google Password Manager. You can have up to 10.
Sign in with a passkey
On the sign-in page, choose Sign in with a passkey, pick your account if asked, and confirm with your fingerprint, face or PIN. Some browsers also offer your passkey as soon as you tap the email box.
Where a passkey works
A passkey works wherever the password manager that saved it works. For example, one saved in iCloud Keychain works on your Apple devices but not on Android or Windows. Using passkeys in the apps explains this and how to add one for each device.
Remove a passkey
- Go to Settings › Passkeys and choose Remove next to the passkey.
- Confirm your password.
- Delete it from your password manager too, so it stops being offered when you sign in.
Remove a passkey straight away if you lose the device it's on, unless the device is protected by a synced password manager you still control.
Your password still works
Adding a passkey doesn't change your password. You can always sign in with your email and password, and "Forgot password?" is there if you need it.
Something not working? See Passkey problems and how to fix them.