How to create and manage passkeys

What is a passkey?

A passkey is a security feature that protects your moomoo trading account and assets. Once enabled, you will need to verify your identity with a passkey when logging in or performing sensitive actions.

A passkey replaces your traditional password with a faster, more secure login method. You can quickly verify your identity using your fingerprint, face recognition, or screen lock.

 

How to create and manage passkeys

Passkeys are supported on the moomoo mobile app (version 16.20.25608 or later) and desktop app (version 16.20.16508 or later). Your device must run iOS 16, Android 9, Windows 11, or later.

1. Log in to moomoo and go to Me > Settings > Passwords & Security > Passkeys. Ensure your device has a screen lock enabled (e.g., passcode, fingerprint, or face recognition).

2. Tap Create Passkey, then verify your phone number via SMS.

3. When your device prompts you, choose where to save the passkey (if applicable). Tap Continue and authenticate with your screen lock.

4. To rename a passkey, tap the edit icon next to it. To remove a passkey, tap the delete icon. Deleted passkeys can no longer be used to log in or verify your identity. You may also need to manually remove it from your device's password settings.

iPhone/iPad:

• Follow the on-screen instructions to create a passkey using Face ID, Touch ID, or your device passcode. The passkey is automatically saved to your iCloud (ensure syncing is enabled via Settings > [your name] > iCloud > Passwords). Once created, you can use the passkey on any Apple device signed in with the same Apple Account.

• Another device: Scan the QR code displayed on screen, then follow the prompts on a compatible device (iPhone, iPad, or Android) to authorize and save the passkey.

• Security key: Select the corresponding option and follow the prompts to set up a USB or NFC security key. (Note: Security keys are sold separately.)

• Third-party apps: You can also choose to save your passkey in a third-party password manager, such as Google Password Manager or 1Password.

Android:

• Follow the on-screen instructions to create a passkey using your fingerprint, face recognition, or screen lock.

• With Google Account sync: Your passkey is saved to Google Password Manager and is available on all devices signed in to the same Google Account. You can also choose to scan a QR code to save the passkey on another compatible device (iPhone, iPad, or another Android), or follow the prompts to set up a USB/NFC security key. (Note: Security keys are sold separately.)

• Without Google Account sync: Your passkey is stored locally. It cannot be synced and can only be used on this device.

Mac:

• Follow the on-screen instructions to create a passkey. The passkey is automatically saved to your iCloud Keychain (ensure syncing is enabled in System Settings > [your name] > iCloud > Passwords and Keychain, and toggle on Sync this Mac). Once created, you can use the passkey on any Apple device signed in with the same Apple Account.

• You can also choose other methods: use a third-party password manager (such as 1Password or Bitwarden) to create and sync passkeys across platforms.

• If you have a security key, select the corresponding option and follow the instructions to set up a USB security key. (Note: Security keys are sold separately.)

Windows:

• Follow the on-screen instructions to create a passkey using Windows Hello (face, fingerprint, or PIN). Then choose where to save it:

• Microsoft account: Your passkey is saved to your Microsoft account and available on all Windows devices signed in to the same account. You can also scan a QR code to authorize and save the passkey on another compatible device, such as an iPhone, iPad, or Android device.

• This Windows device or third-party apps: If you do not use Microsoft Account sync, your passkey will be stored locally on your current device and will not sync across devices. Alternatively, you can choose to save it in a third-party password manager (such as 1Password or Bitwarden) for cross-platform use.

• If you have a security key, select the corresponding option and follow the prompts to set up a USB security key. (Note: Security keys are sold separately.)

Note: HarmonyOS does not currently support passkeys.

 

How to log in or verify your identity with a passkey

Ensure your device and OS version support passkeys (see requirements above).

Method 1:

• You do not need to enter your User ID or password. Simply tap the passkey option at the bottom of the login page to verify your identity using your device.

• The system will automatically search for passkeys stored locally and in the cloud. Once a matching passkey is found, complete the verification using your device's screen lock (such as biometrics or a passcode). If multiple passkeys are stored on your device, select which account to log in with.

• If no passkey is available on your current device, you can verify by scanning a QR code with another device or by using a security key. (Note: A passkey must already be added to your account before you can use this method.)

Method 2:

• Enter your user ID, email address, or phone number and tap Continue. If you have already created a passkey for this account, the system will prompt you to log in with your passkey.

• The system automatically searches for passkeys stored locally and in the cloud. Once a matching passkey is found, complete the verification using your device's screen lock (such as biometrics or a passcode).

• If no passkey is available on your current device, you can verify by scanning a QR code with another device or by using a security key. (Note: A passkey must already be added to your account before you can use this method.)

 

What if my passkey is lost or unavailable?

If you cannot log in with a passkey, or if the device storing your passkey is lost, simply close the verification pop-up and tap the option at the bottom of the page to switch to another verification method. You can then log in using your account password or phone number verification.

Please note that logging in on a new device for the first time will also require you to verify your identity with your trusted device. Once you have successfully logged in, go to your passkey settings page, delete the invalid passkey, and set up a new one.

 

FAQ

Q: Why am I unable to create a passkey?

A: You may be unable to add a passkey due to one of the following reasons:

• No screen lock is set up on your device. Your device can currently be opened without face recognition, fingerprint recognition, or a passcode. To fix this, set up a screen lock in your device settings, then try adding the passkey again.

• You are using a third-party password manager that does not currently support passkey features.

• Your device or operating system version is outdated, or it natively does not support passkey functionality.

 

Q: Why isn't my passkey syncing across devices after I switched to a new device?

A: For cross-device syncing to take effect, the following conditions must be met: you need to add a system passkey in moomoo, and enable cloud sync for passwords and passkeys in your device's system settings. For example:

• iOS: Go to Settings > [your name] > iCloud, and enable syncing for Passwords & Keychain. Both devices must be signed in with the same Apple Account.

• Google Pixel / Stock Android: Go to Settings > Google > Password Manager, and turn on Sync passwords and passkeys.

• Other Android devices (Xiaomi, OPPO, vivo, etc.): Check your device manufacturer's instructions for enabling password sync.

Note: Some Android devices do not support cross-device passkey syncing. Passkeys on such devices can only be used on the device where they were created. The exact settings path may vary — please check your device's settings for the exact steps.

 

Q: Why haven't I been prompted to use a passkey?

A: This may be due to one of the following reasons:

1. You have not added a passkey to your current account or device.

2. A passkey was previously added to your account but has since been deleted.

 

Q: I'm being prompted to set a PIN when using my USB security key. What should I do?

A: You can set up a PIN using any of the following three methods:

• Method 1: Contact your USB security key vendor to obtain their key management tool, then use it to set up a PIN. You can also change your PIN later using this tool.

• Method 2: When adding a passkey via the web or desktop application, some browsers or applications will prompt you to create a PIN. Follow the on-screen instructions to complete the setup. Note that this method does not allow you to change the PIN afterward. Use Method 1 or Method 3 for that.

• Method 3: Open Google Chrome, go to Settings > Privacy and security > Security > Manage security keys > Create a PIN. Enter and confirm your PIN, then click Save. You can also change your PIN later using this method.

 

Q: Why did passkey verification fail?

A: Passkey verification may fail for the following reasons:

1. Passkey not added to the device: The device you are currently using does not have a passkey set up, so verification cannot be completed.

2. Invalidated passkey: Actions such as formatting your device or deleting the passkey can invalidate it. If your passkey isn't working, try logging in using an alternative method, then go to Settings, remove the old passkey, and create a new one.

3. App/device passkey mismatch: If you deleted the passkey within the app but it still exists in your device's system, verification errors may occur. First, delete the corresponding passkey from your device's password settings, then log in using another method and set up a new passkey.

4. Incorrect passkey selected: The passkey you selected does not match the account you are trying to access.

5. Temporary service issue: Server instability can also cause failures. Try logging in using another method, then delete and set up your passkey again.

6. USB security key PIN not set: If you reset the PIN on your USB security key but didn't set a new one afterward, verification will fail immediately.