A passkey replaces the password with your device's fingerprint, face or screen lock. It can't be phished or guessed, and it's the fastest way to sign in at a busy front desk.
What a passkey is
A passkey is a sign-in stored on your device, opened with whatever already opens that device: a fingerprint, your face or the screen lock code. There's no password to type, and because the passkey only exists on your device, it can't be phished or guessed from somewhere else. Your password still exists and still works; a passkey is an extra way in, not a replacement.
A passkey sign-in isn't followed by an emailed sign-in code, because the device itself is the second proof. If you use a password manager that syncs passkeys, such as iCloud Keychain or 1Password, one passkey can work across your devices; otherwise add one per device.
Add a passkey
Only you can add or remove passkeys on your own user. An administrator can see yours but can't change them.
Open Settings, then Users & Practitioners, open your own user and select Manage next to Passkeys
The page lists any passkeys you already have, with when each was added and last used.
Select Add passkey
Your browser or device asks you to confirm with your fingerprint, face or screen lock, and may ask where to save the passkey. Do this on the device you'll sign in from.
Check it's listed
The new passkey appears with the device it was made on. If you cancel the device's prompt you'll see Passkey registration has been canceled.; if you wait too long, Passkey registration has timed out. Select Add passkey again.
Sign in with it
On the sign-in page select Sign in with a passkey, above the email field, and confirm on your device. You go straight to your dashboard. If you cancel the device's prompt nothing happens; if the passkey isn't on this device you'll see Passkey sign-in failed or was canceled. and can sign in with your password instead.
A passkey can also stand in for your password when ClinyPal asks you to confirm it's you before a sensitive change; see Why you're asked to confirm your password again.
Remove a passkey
When a phone or laptop is replaced, lost or handed to someone else, delete its passkey: select Delete on that row and confirm. The device can no longer sign in as you. The passkey entry on the device itself, if it still exists, becomes useless. Your password and any other passkeys are unaffected.
Passkeys and required two-factor authentication
When the clinic requires two-factor authentication, everyone must set up an authenticator app, including people who sign in with a passkey. After that, a passkey still signs you in on its own, without a code; signing in with a password asks for the authenticator code. See Enforce clinic-wide security settings.