Set up a passkey

Passkeys let you log in to Sage Intacct using your device's built-in security, such as fingerprint recognition or a device PIN, instead of a password. Passkeys are phishing-resistant and are stored securely on your device, meaning your private key never leaves the device.

Before you begin

Before you set up a passkey, confirm that your device and browser support passkeys. Passkeys work on most modern devices and browsers, including:

  • Current versions of Chrome, Safari, Firefox, and Edge

  • iOS and macOS devices using Face ID or Touch ID

  • Windows devices using Windows Hello (PIN, fingerprint, or face recognition)

  • Android devices with a supported security lock

Register a passkey

  1. Select the User menuUser circle at the top of any Intacct page and select My preferences.

  2. Go to Security preferences, to the Passkeys section, and select Register a passkey.

  3. Give the passkey a name to help you identify the device (for example, Work Laptop) and select OK.

  4. Select where to save the passkey on your device.
    For example, if you're using a Windows device, you can save your passkey to the Windows Hello. You can then use your Windows password or PIN to log on toIntacct on your device.

You receive an email confirmation when a passkey is successfully registered.

You can register passkeys on multiple devices. Repeat these steps on each device that you want to use for passkey log in.

Log in with a passkey

  1. On the Sage Intacct login page, enter your company ID and User ID.

  2. Select Log in with passkey.

  3. Use your device's biometric or PIN to confirm.

If your passkey is not detected or the authentication fails, you can select Log in to use your username and password instead.

T he option to log in with a passkey is not available if passkeys have not been enabled for your company.

Manage your passkeys

You can view and manage all passkeys registered to your account.

  1. Select the User menuUser circle at the top of any Intacct page and select My preferences.

  2. Go to Security preferences, to the Passkeys section, and review the Registered passkeys.

Your registered passkeys are listed with the credential (device) name, device type, and the date last used.

Revoke a passkey

Revoking a passkey disables it but keeps the record. Use this if you want to prevent log-ins from a specific device temporarily.

  1. Find the passkey in the list.

  2. Select Revoke.

Delete a passkey

Deleting a passkey permanently removes it. You'll need to register the device again if you want to use it in the future.

  1. Find the passkey in the list.

  2. Select Delete.

You receive an email confirmation when a passkey is removed from your account.

Passkeys and two-step verification

When you log in with a passkey, you will not be prompted for a two-step verification code, even if your company has two-step verification enabled. The passkey itself satisfies the strong authentication requirement. If you log in with your password instead, two-step verification applies as usual.