# Passkey & MFA

MyNamirial supports passwordless authentication via **passkeys** and additional security through **multi-factor authentication (MFA)**.

## Passkeys

A passkey is a device-bound credential based on the FIDO2/WebAuthn standard. It replaces the password: the user authenticates with their device's biometric or PIN, and no password is transmitted or stored.

Passkeys are tied to the device where they are created. A user can register multiple passkeys across different devices.

## Two-step verification (MFA)

Two-step verification adds a second factor after the password. MyNamirial supports:

| Method | Description |
|  --- | --- |
| Email OTP | A one-time code sent to the account's email address |
| Authenticator app (TOTP) | A time-based code generated by an authenticator app |


Whether MFA is required, optional, or disabled depends on the configuration of the service the user is accessing.

## Related

[Single Sign-On](/products/mynamirial/modules/single-sign-on) · [Two-step verification guide](/products/mynamirial/manuals/security) · [Manage passkeys guide](/products/mynamirial/manuals/passkeys)