Each passkey is either device-bound or available for cross-device use. If you have a device-bound passkey and use multiple devices to log in, you have two options. Disconnect the passkey and set up a cross-device passkey, or set up a separate device-bound passkey on each device.
Required Editions
| Available in: both Salesforce Classic and Lightning Experience |
| Available in: all editions |
| User Permissions Needed | |
|---|---|
| To remove a user’s passkey: | Manage MFA in User Interface |
Switch to a Passkey for Cross-Device Use
If you have a device-bound passkey, disconnect it and set up a new passkey for cross-device use.
- To log in, see Access Your Account When You Can’t Use a Passkey.
-
After you log in, disconnect your existing passkey. See Manage Passkeys and Security Keys.
If you’re a Salesforce admin helping a user with these steps, you can also disconnect the passkey from the user’s account on the user’s behalf.
-
To set up a new passkey for cross-device use, see Create a Passkey and follow the steps for one of
these options.
- Set Up Synced Passkeys with Password Managers
- Create a Passkey on a Physical Security Key
- Use a Passkey on Another Device (QR Code Login)
You can use synced passkeys that are stored in password managers. Salesforce also supports physical security keys, such as YubiKeys or Titan keys. If you have another device that supports passkeys, such as a phone or tablet, you can use it to log in from multiple devices.
Set Up Another Device-Bound Passkey
As an alternative to setting up a passkey for cross-device use, set up separate device-bound passkeys on each device where you log in to Salesforce.
If you log in on multiple devices, complete these steps on each device.
- To log in, see Access Your Account When You Can’t Use a Passkey.
-
To set up a new passkey for this device, see Create a Passkey and follow the steps for Set Up
Device-Bound Passkeys on Each of Your Devices.
Each passkey remains bound to the device where you set it up.