[Estimated Reading Time: 3 minutes]
This guide explains how to set up a passkey for your XT account via the website. Passkeys offer a more secure and convenient way to sign in without relying on traditional passwords. Follow the steps below to enable passkey login and enhance your account security.
What is passkey?
A passkey is a secure, password‑free authentication method that uses device‑based verification instead of traditional passwords. Rather than entering a password or one‑time code, you can verify your identity using biometric authentication (such as fingerprint or facial recognition), a device PIN, or a hardware security key (such as YubiKey).
Passkeys provide a faster and more secure login experience and can be used not only for signing in to your XT account, but also for completing sensitive actions such as withdrawals or security setting changes.
This technology is widely supported by major platforms including Apple, Google, and Microsoft, and follows global security standards established by the FIDO Alliance. Passkeys are already built into most modern devices and web browsers.
Key features of passkeys
1. No passwords to remember
With passkeys, you no longer need to create or remember passwords. XT does not store passwords on its servers, which helps reduce the risk of password leaks and unauthorized access.
2. Secured by public‑private key encryption
Passkeys use asymmetric (public‑private key) encryption technology:
- XT stores only your public key, which is used to verify your identity during login.
- Your private key is securely stored on your personal device, such as your mobile phone, computer, or a hardware security key.
- The private key never leaves your device, even during authentication, providing strong protection against server‑side attacks.
3. Protection against phishing attacks
Passkeys are domain‑specific and can only be used on official XT websites or apps. If you visit a fake or phishing site, the passkey will not work. This helps prevent credential theft that can occur with passwords, SMS codes, or authenticator codes.
4. Built‑in multi‑factor authentication (MFA)
Passkeys include multiple layers of security by default:
- Trusted device: Authentication can only be completed on a device you own.
- Device verification: You confirm your identity using biometric authentication (such as fingerprint or face recognition) or a device PIN.
Setup a passkey on XT website
1. Log in to your account and go to [Profile], then select [Security Center].
2. Look for [Passkey] and click [Setting].
3. Click [Enable] and complete the required security verification.
4. You will see a pop-up in your browser. Confirm this is your XT account's email address and choose a verification method for your new passkey.
- Chrome Profile: Click [Create]. Click [Continue] to proceed. You may be asked to verify using your device password or biometric authentication (for example, Touch ID on a Mac). Please note that the passkey created using this option will be stored only on the current device.
- Google Password Manager: Click [Save another way], then select [Google Password Manager]. Click [Create] to save your passkey to Google Password Manager. This option is recommended, as your passkey will be securely synced across devices linked to your Google account.
- USB Security Key: Click [Save another way] and select [Security key]. Insert your USB security key into your computer and follow the on‑screen instructions to complete verification.
- Another Device: Click [Save another way] and select [iPhone, iPad, or Android device]. A QR code will appear on the screen. Scan the QR code using your device, tap [Save a passkey], and follow the instructions to complete setup.
5. Once completed, the passkey will be successfully added to your XT account.
Delete a passkey on XT website
1. Log in to your account and go to [Profile], then select [Security Center].
2. Look for [Passkey] and click [Change].
3. To remove a passkey, click [Delete] and complete the required verification using your passkey or 2FA.
4. Once completed, the passkey will be successfully deleted from your account.
Frequently Asked Questions (FAQs)
1. What is a passkey and how is it different from a password?
A passkey is a password‑free login method that uses device‑based authentication, such as biometrics, a device PIN, or a hardware security key. Unlike passwords, passkeys cannot be guessed, reused, or phished.
2. Is a passkey required to use my XT account?
No. Passkeys are optional but strongly recommended, as they provide enhanced security and protection against phishing attacks.
3. Do I still need a password after enabling a passkey?
Yes. Your password remains as part of your account credentials, but passkeys allow you to sign in more securely without entering your password in most cases.
4. Can I use a passkey alongside 2FA?
Yes, you can use passkeys in combination with two-factor authentication (2FA) for added security.
5. Can I use a passkey on multiple devices?
Yes. You can set up passkeys on multiple devices, as long as each device supports passkeys and secure authentication (such as biometrics, a device PIN, or a hardware security key). You will need to add the passkey separately on each device, unless it is saved to a password manager that supports cross‑device syncing (for example, Google Password Manager).
6. What happens if I lose my device?
You can log in to your account using your email/phone number and password to delete the lost device’s passkey via [Security Center].
7. Can I re‑enable or add a new passkey after deletion?
Yes. You can add a new passkey at any time through the [Security Center].