Sign in with passkey

You can now sign into Brex with a passkey instead of your password and multi-factor authentication (MFA). Passwords and one-time codes can be phished, guessed, or stolen, and that's often how account takeovers start. Passkeys close that gap.

Passkeys let you sign in with something your device already uses to verify you: biometrics (such as Touch ID or Windows Hello) or a device PIN. There's nothing to reuse or hand to an attacker, which is what makes passkeys phishing-resistant.

Signing in with a passkey is faster too: one check on your device, with no fumbling for a second factor like a one-time code or authenticator app.

A "Sign in with passkey" button now appears next to the password option. Set up one or more passkeys in your personal settings, and use any of them to sign in. Password and MFA sign-in still work too; passkeys are an additional way to authenticate into your account.

Passkeys sync across your devices and through password managers like iCloud Keychain, Google Password Manager, and 1Password, so you can sign in wherever you work.

Every passkey added or removed is recorded in your audit log, so you and your team can see exactly what changed and when.

To enable passkeys, admins should go to Settings > Early Access and toggle on the feature to allow their organization’s users to set up passkeys.