Security key, passkey and fingerprint unlock
Last updated October 2, 2026
Security key or passkey (browser)
Browser extension Use a security key (such as a YubiKey), Windows Hello, or your phone instead of typing your master password. This is only in the browser extension.
- Open Tools → Unlock & security. In Unlock with a security key or passkey, choose Add a security key or passkey.
- Enter a Name for this key (for example "Blue YubiKey") and your Master password, then choose Continue.
- Touch or unlock your key when the browser asks.
Next time MoatKey is locked, choose Use security key or passkey. Use master password instead always works.
What works
- The key must support the PRF feature (also called hmac-secret) and check you with a PIN, fingerprint or face. Most YubiKey 5 and newer keys, phones with current Android or iOS, and recent Windows Hello do. If yours doesn't, MoatKey says so and saves nothing.
- A key works only in the browser profile where you added it.
- You can add up to 10 keys.
To stop using one, choose Remove next to it. The key itself may still hold a MoatKey sign-in entry, which you can delete in the key's own settings.
Fingerprint or face (Android)
Android app Open Settings and turn on Fingerprint or face unlock. Set up a fingerprint or face in your phone's settings first. See Android app.
Why MoatKey asks for your master password every 14 days
Security keys, passkeys, fingerprint unlock and approve-on-phone are all shortcuts. Every 14 days, MoatKey asks for your master password once to keep them on. It also asks after your master password changes. This makes sure you still remember it, because it's the password you'll need on a new device, and it's what protects you if a shortcut is lost.
When it's due, MoatKey says: It has been 14 days, so MoatKey needs your master password once to keep quick unlock on.