Sign in to VoxelBench with a passkey

Your fingerprint, your face or your device's PIN, instead of a password

voxelbench.com now supports passkeys. A passkey is a pair of keys your device creates for voxelbench.com: the private half never leaves your phone, your computer, your password manager or your security key, and the site only keeps the public half. To sign in, your device signs a one-time challenge from the site, after you unlock it with your fingerprint, your face or its PIN. There is no password to type, to reuse or to leak.

Why use one

It is faster. One touch or one glance: no password, and no 6-digit code.
It counts as your second factor. If your account has two-factor authentication, signing in with a passkey does not ask for the code: the passkey already proves two things, that you hold the device and that you unlocked it. This is why VoxelBench requires that unlock every time, and refuses a security key that has no PIN.
It cannot be phished. A passkey only works on voxelbench.com. A look-alike site, even a perfect copy, gets nothing it could use: your browser does not offer the passkey there.
There is nothing to steal on our side. We keep the public key, the name you give the passkey, when it was added and when it was last used. A public key cannot sign anyone in.

Add a passkey

You need an account first: create one with your email address, or with Discord or Google, as before. Then:

Open Settings → Security. The Passkeys card sits under two-factor authentication.
Click Add a passkey and give it a name you will recognise, such as "iPhone" or "YubiKey". Leave the name empty and VoxelBench uses your browser and system, such as "Chrome on Windows".
Confirm it is you: your password if your account has one, and your 2FA code if two-factor authentication is on (a backup code works too). An account with neither, signed in with Discord or Google, needs a sign-in from the last 15 minutes instead: if yours is older, sign out and back in first.
Click Create the passkey, then follow your browser's prompt: this device, your password manager, a phone nearby or a security key.

An email confirms every new passkey. If you did not add it, remove it right away, change your password and contact us.

You can keep up to 10 passkeys: one per device, for instance, plus a security key as a spare. A passkey saved in a password manager that syncs it across your devices, such as iCloud Keychain or Google Password Manager, shows a Synced badge.

Sign in with it

On the sign-in page, click Sign in with a passkey. You can also click the email field: browsers that support it list your passkeys there, the way they list saved passwords. Pick yours, unlock, and you are in.

Your other ways of signing in keep working: your password, Discord or Google. Losing a phone does not lock you out of your account. Sign in another way, then remove that phone's passkey.

Rename or remove a passkey

The Passkeys card lists each passkey with the date it was added and the date it was last used. Rename changes its name. Remove asks for the same confirmation as adding one, and an email tells you it was removed. A removed passkey stops working at once. Your device may still offer it until you delete it there too, but VoxelBench refuses it.

Which browsers

Passkeys work in current versions of the major browsers, on computers and on phones. If yours does not support them, the sign-in page does not show the passkey button, and the Passkeys card tells you so. You can still sign in as before.

What we keep about your passkeys is listed in our privacy policy.