Passkeys are the “new black” in the world of authentication! Cameo has supported logging in with a passkey long before they were called passkeys1. Now, password managers and many websites are starting to support passkeys, which makes logins easier and safer.
Contents
Passkeys
A passkey offers password-less logins. Your password manager stores a digital key (properly called a private key) and your website stores a matching lock (the public key). When you want to log in, the website provides the public key back to the password manager, where it checks for a match.
Where possible, the platform’s physical security protects the passkey. On iPhone you’ll need to use Face ID or Touch ID (fingerprint), for example. On Macs that have a fingerprint reader, you’d use that. Third-party password managers usually let you decide whether you need this verification.
Passkeys are much less vulnerable to hackers than passwords because:
- the credentials are generated randomly for you,
- are much longer than passwords,
- can never be shared, and
- are not stored by websites (so cannot be leaked; you can’t get the private key if all you have is the public key).
Passkey support
Products that now support managing passkeys include:
- Apple’s password manager on iPhone, IPad (some support in version 16, better in 17) and recent Mac Safari, synchronised between them,
- Windows 11 Hello (in Windows 22H2 and later). However, we don;t recommend using this as the passkey is only available on that single computer (unless you are using a Yubikey or similar)
- Bitwarden password manager (free; recommended where you use both Windows and Apple or a browser other than Safari on Mac; and on Linux); synchronised everywhere you have installed it
- 1Password (similar to Bitwarden, but paid subscriptions only)
As well as Cameo, many big-name websites and apps allow you to login with a passkey, particularly:
We expect most significant websites to offer logins via passkey soon.
Adding a passkey for Cameo login
Once logged in to Cameo with a password
- go to profile → login in / log out
- click the add new passkey button
- follow the instructions for your chosen provider
Log in to Cameo using a passkey
The first time, on the login page:
- click log in with passkey
- enter your email address
- click the login with passkey button
- follow the instructions for your chosen provider
Cameo remembers your choice in that browser. After that, it automatically takes you to that login screen, with your email address already filled in. So all you have to do is click the button to authorise the passkey app to let you in.
For example, an iPhone with FaceID just needs to see your face to complete authorisation; or scan your fingerprint on a TouchID-enabled Mac.
Logging in on someone else’s computer
Occasionally you may need to log in on a computer where your password manager is not available. In this position, you should use passkey’s phone login solution. Both devices must have Bluetooth turned on.
When you use a password manager yourt passkeys are synchronised across all your devices where it is installed. This should include your phone, whether or not that is where you created it.
On an unfamilar computer, start as usual by logging in with a passkey. One of the choices offered should then be iPhone, iPad or Android devices (Windows) or Scan QR Code (Apple). If the unfamiliar computer already has (someone else’s) password manager installed, it may start that instead. There should then be an option to choose an alternative, possibly at the end of its list, which leads you to that choice.
Choosing that option displays a QR Code. Scan it on your phone and tap the button to use the passkey. That starts your password manager, where you authorise using the key just like logging in locally. The other computer recognises you have done this and magically logs you in.
This now works much more smoothly on up-to-date systems than it used to. So as of May 2026 Cameo no longer provides its own equivalent, phone login.
- They originally went under the terrible name webauthn. Strictly speaking, passkeys are just one way of using webauthn, which also includes hardware keys such as Yubico, where the hardware stores the public key. But in practice, this is what they’ll all be called now. ↩︎