---
schema_version: "1"
id: ddf1564403d5231e2b602814e18c4cae05ab49fc1c224f668fdedd4f320a4603
title: Enable Native Browser Authentication for iOS Before Passkey Enforcement
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/262-0-0/rn_security_adv_auth_passkey_enforcement.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_security_adv_auth_passkey_enforcement.htm&release=262.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 5e92e9603dd436345a36bdd1b421bd4cb609ea3453085e218bb2e51e52b51279
description: Before you enable passkey enforcement for mobile SDK apps on iOS, turn on native browser authentication in My Domain. Otherwise, users who register passkeys are permanently locked out of your mobile app and must reinstall it or clear app data to recover.
products:
  - Cross Cloud
release: "262"
---
# Enable Native Browser Authentication for iOS Before Passkey Enforcement

Before you enable passkey enforcement for mobile SDK apps on iOS, turn on native browser authentication in My Domain. Otherwise, users who register passkeys are permanently locked out of your mobile app and must reinstall it or clear app data to recover.

**Why:** Without native browser authentication enabled, iOS users get trapped in an authentication loop after registering passkeys. They're required to verify with their passkey at every login due to MFA enforcement, but the login flow can't present the passkey challenge. When you enable this setting before passkey registration, login routes through Safari, which fully supports passkeys and prevents lockout scenarios.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-release-notes-salesforce_release_notes-262-0-0-production-enus/e945111b-3e0a-4011-accc-d5949363bfcc/images/icon_note.png)

Note

Salesforce is [enforcing phishing-resistant multi-factor authentication](https://help.salesforce.com/s/articleView?id=005321563&type=1&language=en_US) (MFA) for all users with the System Administrator profile, Modify All Data, View All Data, Customize Application, or Author Apex permissions. Enable native browser authentication for iOS in My Domain on mobile SDK apps before the requirement begins.

**How:** Before you enable passkey enforcement, turn on native browser authentication for iOS. From Setup, in the Quick Find box, enter My Domain, select **My Domain**, and then select **Use the native browser for user authentication on iOS** under Authentication Configuration.