Signing in and passkeys

What a passkey is

A passkey replaces a password. Instead of typing anything you sign in the same way you unlock your phone or computer - with a fingerprint, your face or the screen-lock PIN. The secret half of the key never leaves your device, so it cannot be intercepted or phished out of you.

The passkey is stored by your device's password manager (iCloud Keychain on Apple devices, Google Password Manager on Android, the browser's password manager). If that manager syncs, the passkey works on your other devices too.

The e-mail link stays

A passkey is always an addition, never the only way in. Signing in with the e-mail link (magic link) keeps working and is your backup if you lose the device, borrow someone else's computer or the password manager fails. The Google, Apple and LinkedIn buttons stay available too, if you use them.

Signing in on the web

1. Open the sign-in page. 2. Tap Sign in with a passkey. 3. Confirm with your face, fingerprint or PIN.

The button appears only in a browser that supports passkeys.

Signing in in the app

In the JobsAI mobile app from version 1.2.0 the whole sign-in happens inside the app - the system dialog asks for Face ID, your fingerprint or the screen lock, and no browser opens at all. The Sign in with a passkey button appears above the regular sign-in whenever your device supports passkeys.

On an older device, or one without a screen lock, the button is not shown and you sign in with the e-mail link.

How to create a passkey

You create a passkey only once you are signed in, so it always belongs to an account that is really yours:

• In the app: Profile -> Passkeys -> Add passkey (from version 1.2.0).
• On the web: Account settings -> Passkeys section -> Add passkey.

A key created in the app works on the web and the other way round - it is one account. You can keep up to ten passkeys per account, for example for your phone, tablet and work laptop.

Removing a passkey

Remove a passkey where you created it: in the app under Profile -> Passkeys, on the web in Account settings. Removing the last one is allowed - signing in with the e-mail link remains. If you lose a device, remove its passkey as soon as you can; the key stays on the device until you delete it from your account.

Good to know

• A passkey is tied to one domain. A key created on jobsai.cz cannot be used anywhere else and a phishing page never gets it.
• Do not create a passkey on someone else's device; use the e-mail link for a one-off sign-in.
• Deleting your account removes all of its passkeys as well.