Manage passkey authentication

Who can do this?
Role: Organization admin
Atlassian Cloud: All plans
Atlassian Government Cloud: Not available

Control whether managed users in your organization can use passkeys to sign in to Atlassian products. Passkeys are a phishing-resistant alternative to passwords that use biometrics or a device PIN to verify identity; no password required.

By default, passkey authentication is blocked for managed users. You can allow or block it for each authentication policy.

If single sign-on (SSO) is enforced on an authentication policy, passkey authentication is unavailable and the Passkeys setting won't appear.

Allow or block passkey authentication

To allow or block passkey authentication:

  1. Go to Atlassian Administration. Select your organization if you have more than one.

  2. Select Security, then User security, then Authentication policies.

  3. Select the policy you want to modify.

  4. Select Edit.

  5. Under Authentication method, find Passkeys and select Allow passkeys or Block passkeys.

  6. Select Update to apply your changes.

  • Active sessions: Blocking passkeys doesn’t immediately end active user sessions created with a passkey. To log users out immediately, select Reset sessions on the policy. Find out how to reset sessions

  • Next sign-in: Users must use another permitted method (such as a password or SSO) the next time they sign in.

 

Still need help?

The Atlassian Community is here for you.