Sign in to the backoffice with a passkey 2026-10-03
For all backoffice users
Passwords get forgotten, reused or typed into fake pages. A passkey replaces the password: you sign in the way you unlock your phone or laptop - with your fingerprint, face recognition or the device PIN. For the Bookacamp backoffice this sign-in can be enabled per account.
Why it is more secure
- The passkey stays on your device and never leaves it. Bookacamp only stores a public key that nobody can sign in with.
- A passkey only works on bookacamp.de. On a fake sign-in page your browser does not even offer it - phishing comes to nothing.
- Owning the device plus fingerprint or PIN are two factors in a single step. If your account made two-factor authentication (MFA) mandatory, a passkey fulfills that requirement as well - you do not need an authenticator app then.
How to set it up
First a main user enables the sign-in: in Settings, section Security, tab Passkey. Then every person sets up their own passkey in their profile under Manage passkeys. Your browser asks for fingerprint, face or PIN, and the passkey is saved.
To sign in, enter your user name as usual and click Login with Passkey. If you have access to several accounts, you choose the one you want afterwards. Signing in with the password remains possible.
No fingerprint reader on your computer?
That is no obstacle. On Windows the Windows Hello PIN is enough. Alternatively use your smartphone: the browser shows a QR code, you scan it with your phone and confirm there. Security keys such as a YubiKey and password managers from Google, Apple, 1Password or Bitwarden work as well.
Device lost?
Main users can remove the passkeys of a person in the user management. The person then signs in with their password and sets up a new passkey on the new device.
Author: Mathias Methner