Skip to main content
The Passkey signer uses the WebAuthn Validator module to authorise transactions with device-native biometrics: Face ID, Touch ID, Windows Hello. No seed phrases, no browser extensions. Keys are generated and stored in the device secure enclave and can sync across devices via iCloud Keychain or Google Password Manager. Passkeys are supported across iOS, Android, macOS, and modern browsers (Chrome, Safari, Edge).

Single owner

Multisig

The WebAuthn Validator supports n/m multisig with multiple passkey owners and a configurable signature threshold. A common use case: users register a passkey per device. You set up a 1-of-n account so the user can sign from any of their devices without needing to migrate keys.

Setup

By default, threshold is 1, meaning any single passkey can sign.

Signing with a subset of owners

For m-of-n setups, specify which passkeys to use when sending a transaction:
Provide at least as many signers as the threshold requires, or the transaction will fail validation.

Add a passkey (new device)

Remove a passkey

Change threshold

Get current owners

Enable in a separate transaction

If you need to enable the passkey module on an existing account rather than at creation time:

Example: multi-device 1-of-n

For a full multi-device 1-of-n walkthrough, see the multisig guide. See it in action: passkey example — a passkey-only account with no third-party auth provider.