Passkeys on iOS
To enroll passkeys in SafeNet MobilePASS+, you must configure MobilePASS+ as a passkey manager on your iOS device. This allows MobilePASS+ to create and manage the passkeys that you use to access apps and websites.
Configure MobilePASS+ as a passkey manager
Configure MobilePASS+ as a passkey manager in the iOS settings. There are several ways to access these settings.
Welcome tutorial
The MobilePASS+ welcome tutorial includes a Manage Passkeys screen, which includes basic instructions and a button that opens the iOS system Settings, where you can set MobilePASS+ as a passkey manager.
-
On the Manage Passkeys screen, tap Go to Settings.
-
The operating system does not allow apps to take you to the specific setting, so you have to navigate to it:
-
On iOS 18+, go to Settings > General > Autofill & Password.
-
On iOS 17, go to Settings > Passwords > Password Options.
-
-
Slide the MobilePASS+ toggle to activate MobilePASS+ as a passkey manager. The tutorial indicates that the Passkey Manager is active.
Post-upgrade tutorial
If you upgraded MobilePASS+ from the App Store, the app settings show a notification. When you open the settings, a passkeys tutorial starts. The second screen of this tutorial has a button that opens the iOS system settings.
-
Open MobilePASS+ and tap the app Settings, which has a notification dot.
-
On the Introducing Passkeys screen, swipe to show the Manage Passkeys screen, and then tap Go to Settings.
-
The operating system does not allow apps to take you to the specific setting, so you have to navigate to it:
-
On iOS 18+, go to Settings > General > Autofill & Password.
-
On iOS 17, go to Settings > Passwords > Password Options.
-
-
Slide the MobilePASS+ toggle to activate MobilePASS+ as a passkey manager. The tutorial indicates that the Passkey Manager is active.
MobilePASS+ app settings
You can set MobilePASS+ as a passkey manager in the application settings.
-
Open MobilePASS+ and tap the app Settings icon.
-
Next to Enable MobilePASS+ Passcode Manager, tap Go to Settings.
-
The operating system does not allow apps to take you to the specific setting, so you have to navigate to it:
-
On iOS 18+, go to Settings > General > Autofill & Password.
-
On iOS 17, go to Settings > Passwords > Password Options.
-
-
Slide the MobilePASS+ toggle to activate MobilePASS+ as a passkey manager. The settings indicates that the MobilePASS+ passkey manager is active.
Passkey QR code
When MobilePASS+ is not set up as a passkey manager and you scan the QR code for a passkey, a message box opens and prompts you to activate MobilePASS+ as a passkey manager.
-
Scan a QR code for a passkey.
-
On the dialog box, tap Go to Settings.
-
The operating system does not allow apps to take you to the specific setting, so you have to navigate to it:
-
On iOS 18+, go to Settings > General > Autofill & Password.
-
On iOS 17, go to Settings > Passwords > Password Options.
-
-
Slide the MobilePASS+ toggle to activate MobilePASS+ as a passkey manager. The settings indicates that the MobilePASS+ passkey manager is active.
QR code readers for passkeys
Using QR Code readers is the primary mechanism for creating and authenticating passkeys. This can be done using a camera, whether it's the system camera or the QR code reader in the MobilePASS+ application.
-
System QR code reader: Access the system QR code reader from the device camera. When you scan a passkey QR code, the camera app shows the Save Passkey button.
-
MobilePASS+ QR code reader: MobilePASS+ has a QR code reader for enrolling authenticators, including both OATH and passkey authenticators.
Enroll passkeys in MobilePASS+ on iOS
Enrolling passkeys is identical for all providers, regardless of where the passkey is created. Passkey authenticator enrollment is always self-provisioned. With MobilePASS+, this can be done using two methods:
-
QR code enrollment: Use a QR code reader on your iOS device.
-
Device browser enrollment: Use Safari on your iOS device.
Enroll using a QR Code reader on SafeNet Trusted Access
-
On your device, open the user portal using the link provided by your system administrator.
-
On the user portal start window, select Start.
-
Enter your Username and then select Login.
-
On the Protect Your Account screen, select Add Passkey Authenticator.
The system sends you an email that contains a verification code.
-
On the Confirm Your Identity screen, enter the Verification code from the email and select Continue.
-
To confirm your identity, enter your password and then select Submit.
-
On the Select Authenticator Type screen, select Security key, built-in sensor, or passkey and then select Submit.
Note
The next steps are specific to Google Chrome. The steps might be slightly different in other browsers.
-
Select Save another way.
-
Select Use a phone, tablet, or security key.
-
On the device where you want to enroll the passkey, use either the device camera or MobilePASS+ app to scan the QR code.
A connection is established between your device and the browser. The next steps need to be done quickly before timing out (the time-out period is typically 15-30 seconds).
On your device, an Add a passkey message opens. The message includes your username and the service for which you are enrolling a passkey.
-
Verify that this information is correct, and click Continue.
-
When prompted, authenticate using your biometrics.
After your biometrics are verified, the passkey is ready to use.
In MobilePASS+, you can see the passkey in the list of authenticators.
-
Back in the browser, set a nickname for the passkey.
The nickname is only for personal use, such as to help you identify the passkey on the STA portal.
Next, you are presented with a QR code to authenticate you into the login portal.
-
Scan the QR code using a QR code reader, and you are logged in to the SafeNet Trusted Access portal.
Enroll using Safari on your iOS device
The steps to enroll a passkey using Safari are slightly different. You are not prompted to open the camera for anything. Instead, login and authentication are done without even opening MobilePASS+.
View passkey details
To view passkey details, tap the passkey in the MobilePASS+ Authenticator list, which opens a new screen.
On this screen, you can view a description of what passkeys are, along with the user ID, the authenticator type, the URL, and the last time it was used.
Delete a passkey
To delete a passkey, on the passkey details screen, click Remove Passkey.
