[Estimated Reading Time: 3 minutes]
This guide explains how to set up a passkey for your XT account via the mobile app. Passkeys offer a more secure and convenient way to sign in without relying on traditional passwords. Follow the steps below to enable passkey login and enhance your account security.
What is passkey?
A passkey is a secure, password‑free authentication method that uses device‑based verification instead of traditional passwords. Rather than entering a password or one‑time code, you can verify your identity using biometric authentication (such as fingerprint or facial recognition), a device PIN, or a hardware security key (such as YubiKey).
Passkeys provide a faster and more secure login experience and can be used not only for signing in to your XT account, but also for completing sensitive actions such as withdrawals or security setting changes.
This technology is widely supported by major platforms including Apple, Google, and Microsoft, and follows global security standards established by the FIDO Alliance. Passkeys are already built into most modern devices and web browsers.
Key features of passkeys
1. No passwords to remember
With passkeys, you no longer need to create or remember passwords. XT does not store passwords on its servers, which helps reduce the risk of password leaks and unauthorized access.
2. Secured by public‑private key encryption
Passkeys use asymmetric (public‑private key) encryption technology:
- XT stores only your public key, which is used to verify your identity during login.
- Your private key is securely stored on your personal device, such as your mobile phone, computer, or a hardware security key.
- The private key never leaves your device, even during authentication, providing strong protection against server‑side attacks.
3. Protection against phishing attacks
Passkeys are domain‑specific and can only be used on official XT websites or apps. If you visit a fake or phishing site, the passkey will not work. This helps prevent credential theft that can occur with passwords, SMS codes, or authenticator codes.
4. Built‑in multi‑factor authentication (MFA)
Passkeys include multiple layers of security by default:
- Trusted device: Authentication can only be completed on a device you own.
- Device verification: You confirm your identity using biometric authentication (such as fingerprint or face recognition) or a device PIN.
Setup a passkey on XT app
1. Log in to your account and tap the [Account Center] icon in the top left corner.
2. Select [Security Center], then tap [Passkey].
3. To proceed, tap [Enable] and complete the required security verification.
4. You will see a pop-up. Confirm this is your XT account's email address and choose a verification method for your new passkey.
- iCloud Keychain (iOS devices only): If iCloud Keychain is not enabled, you will be prompted to turn it on. Tap [Turn on iCloud Keychain] and follow the instructions. If iCloud Keychain is already enabled, tap [Continue] and verify using your device password or biometrics. Please note that the passkey created will be synced across all your Apple devices using the same Apple ID.
- USB/NFC Security Key:
- On iOS: Tap [More Options] and select [Use Security Key]. Insert your USB security key or bring your NFC security key close to the top of your device to verify.
- On Android: Choose the appropriate option based on your security key type (USB or NFC), then activate the key to complete verification (for example, by holding an NFC key against the back of your device).
- Another Device (iOS devices only): Tap [More Options] and select [Scan QR Code]. A QR code will appear on the screen. Scan it using another device (iPhone, iPad, or Android device), tap [Save a passkey], and follow the on‑screen instructions to complete setup.
- Google Password Manager (Android devices only): If your Android device supports Google Password Manager, you will be prompted to save your passkey there. Tap [Create] and verify using your device’s biometric authentication or PIN. Your passkey will be securely saved and can be synced across devices linked to your Google account.
5. Once completed, the passkey will be successfully added to your XT account.
Delete a passkey on XT app
1. Log in to your account and tap the [Account Center] icon in the top left corner.
2. Select [Security Center], then tap [Passkey].
3. To remove a passkey, tap on the [Delete] icon and complete the required verification using your passkey or 2FA.
4. Once completed, the passkey will be successfully deleted from your account.
Frequently Asked Questions (FAQs)
1. What is a passkey and how is it different from a password?
A passkey is a password‑free login method that uses device‑based authentication, such as biometrics, a device PIN, or a hardware security key. Unlike passwords, passkeys cannot be guessed, reused, or phished.
2. Is a passkey required to use my XT account?
No. Passkeys are optional but strongly recommended, as they provide enhanced security and protection against phishing attacks.
3. Do I still need a password after enabling a passkey?
Yes. Your password remains as part of your account credentials, but passkeys allow you to sign in more securely without entering your password in most cases.
4. Can I use a passkey alongside 2FA?
Yes, you can use passkeys in combination with two-factor authentication (2FA) for added security.
5. Can I use a passkey on multiple devices?
Yes. You can set up passkeys on multiple devices, as long as each device supports passkeys and secure authentication (such as biometrics, a device PIN, or a hardware security key). You will need to add the passkey separately on each device, unless it is saved to a password manager that supports cross‑device syncing (for example, Google Password Manager).
6. What happens if I lose my device?
You can log in to your account using your email/phone number and password to delete the lost device’s passkey via [Security Center].
7. Can I re‑enable or add a new passkey after deletion?
Yes. You can add a new passkey at any time through the [Security Center].