Passkey

Never Delete Your Passkey

Deleting a passkey may cause you to lose your account permanently. There is nothing we can do to recover your account if your passkey is deleted. General Warning

Never deposit more funds than you can afford to lose. Deposit funds at your own risk. Passkey based cryptocurrency wallets are new technology. Nekodex has been tested extensively but it is never possible to ensure software is 100% free from bugs.

Nekodex uses passkeys to create and manage your account. Passkeys are a new, secure way to secure digital assets and accounts.

Benefits

  • A separate passkey is used for every service you sign up for, ensuring there is no password reuse.

  • Passkeys only work with the service you signed up for, meaning phishing is virtually impossible.

  • Passkeys cannot be exported or revealed to others, keeping you safe against social engineering attempts.

  • Passkeys are automatically backed up with iCloud Keychain and Google One, so if you lose your phone, they will be synced to your new phone when you log in.

Passkey Basics

Passkeys are a type of password created securely by your device (usually you phone). It is stored on the device, and can also be backed up securely in your iCloud or Google account. The backup features strong encryption ensuring no one, including Apple and Google, can access your passkeys.

A new passkey is created for each service you use passkeys with, so if the service's data is hacked somehow, your passkey cannot from that service cannot be used to access other passkey protected services.

Each passkey is tied to an email. This is the email you used to sign up to the service. Passkeys are also tied to the service internet domain name (e.g. perp.com), making it impossible to use with another domain (e.g. uniswap.org).

Passkeys are backed up using your iCloud or Google account. Note that the account used to back up the passkey and the email used to create a given passkey can be totally separate. E.g. if you create a Nekodex account with meow@nekodex.org and your phone is logged into Google using meow@gmail.com, your passkeys will be backed up in your meow@gmail.com Google account.

Biometrics

Passkeys are not tied to your biometrics like FaceID or fingerprints, but access to your passkeys is controlled using biometrics via your phone or other mobile device. This means that you can use your fingerprint to tell your phone it's ok to use a passkey to log into a service. However if you change phones, you will need to log into your iCloud or Google account and set up biometrics again. Your passkey will not be lost if something happens to your finger!

Biometrics are not required for passkeys to work. You can also use a code to secure your phone if you prefer to avoid biometrics.

Backups

On iOS and Android devices, passkeys should be backed up automatically.

It's a good practice to double-check that backups are being performed:

  • iOS: After setting up your Nekodex account,, go to Settings > [your name] > iCloud > Passwords and Keychain and verify that a passkey for app.nekodex.org is present.

  • Android: After setting up your Nekodex account, go to https://passwords.google.com/ and double check that your passkey for app.nekodex.org is listed there.

Renaming

The order passkeys are shown to you on your device is likely to change. Your device will automatically name passkeys when they are created but it may be helpful to change the name, making them easier to identify.

Account recovery

Currently account recovery or modification (e.g. cancelling or changing the connected email address) is not possible. However, account recovery is expected to be added in the future.

Last updated