Before you begin
Install the TeamPassword browser extension and sign in.
Make sure you are signed in to TeamPassword in the browser you want to use the passkey in.
The website you’re signing in to must support passkeys (most major sites now do — e.g., GitHub, Google, Dropbox).
Save a passkey for a website
When a website offers to create a passkey (often during account setup or in your security settings), TeamPassword can save it directly into your vault.
On the website, choose the option to create or add a passkey.
When the TeamPassword “Passkey Save” screen appears, confirm the record name and username are correct.
Click Save Passkey.
Tip: If you don’t want to save the passkey to TeamPassword right now, click Skip. The website will still create the passkey, but it won’t be stored in your vault. Instead, you'll have the option to store it through another method.
Sign in to a website with a saved passkey
Once a passkey is saved, signing in takes a single click. TeamPassword automatically detects when a site is asking for a passkey and offers the matching credential.
Go to the website’s sign-in page and choose Sign in with a passkey (or whatever similar option the site offers).
The TeamPassword extension opens a “Sign in with passkey” screen showing the matching credential from your vault.
Click Use Passkey. TeamPassword signs the site’s challenge with your encrypted key and you’re logged in.
If nothing happens automatically: Open the TeamPassword extension and click the key icon in the top-right corner of the header. This opens your passkey records so you can choose one manually.
View and manage your saved passkeys
You can review every passkey TeamPassword has saved — and remove ones you no longer need — from the Password Record view.
Open the TeamPassword extension.
Click the key icon in the top-right corner of the header.
You’ll see a list of every passkey stored in your vault, grouped by website.
To remove a passkey, click the red trash icon next to it. (Removing it from TeamPassword does not delete the passkey from the website — do that in the site’s own security settings if you want to fully revoke access.)
How TeamPassword keeps your passkeys safe
Passkeys are only useful if the private keys behind them stay private. TeamPassword applies the same end-to-end encryption model used for your stored passwords:
Private signing keys are AES-encrypted before they ever leave your browser.
Keys are wrapped with your personal public-key encryption, so only you can unwrap them.
Decryption happens locally inside the extension — the TeamPassword backend never sees a plaintext key.
Each signing operation uses a counter to prevent replay attacks.
Because passkeys are bound to the real website domain, they cannot be used on phishing sites that mimic a login page.
Frequently asked questions
Can I still use my password if I have a passkey?
Can I still use my password if I have a passkey?
Yes. Saving a passkey doesn’t remove your existing password from the website or from TeamPassword. Passkeys are an additional, stronger option — you can fall back to your password if the site doesn’t offer a passkey on a particular device.
What happens if I lose access to my device?
What happens if I lose access to my device?
Because your passkeys live in your TeamPassword vault, you can sign in to TeamPassword on a new device, install the extension, and your passkeys come with you. You don’t need to re-create them site-by-site.
Do I need to be online to use a passkey?
Do I need to be online to use a passkey?
Yes. Authenticating to a website requires the site to send a challenge over the internet, and TeamPassword needs to be reachable to fetch your encrypted key material.
Does TeamPassword see my passkey or the websites I sign in to?
Does TeamPassword see my passkey or the websites I sign in to?
No. Private keys are encrypted in your vault and decrypted only inside the extension on your device. The signing operation happens locally, and TeamPassword never receives a plaintext key.