Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Amazon Is Requiring Passkeys
6 points by trinsic2 8 days ago | hide | past | favorite | 7 comments
I just received an email from Amazon requiring passkeys.

---

Hello,

Starting in two weeks, passkeys will start to be required on a rolling basis for Amazon accounts. This will be required for all of your accounts, including Amazon Business and Amazon.com. As part of our ongoing commitment to security, we're increasing passkey usage to all accounts to protect against unauthorized access and fraud.

Passkeys are a secure, passwordless way to sign in using your device's built-in authentication—like fingerprint, face recognition, or PIN. They can't be phished or stolen, and they're supported by most modern smartphones, tablets, and operating systems.

Set up your passkey, as it will be required for every login after that date. If you haven’t set one up yet, you’ll be prompted to enroll. Your password will remain on file as a backup recovery option but won’t be available for logging in.

We recommend setting up passkeys on at least two devices in case a device is unavailable. Passkeys sync automatically across devices signed into the same Apple ID, Google account, or Microsoft account.

*To set up a passkey:*

1. Log in to Amazon Business. 2. Go to *Login & Security*. 3. Select *Set up* beside *Passkeys*. 4. Follow the on-screen instructions to complete set up (takes less than two minutes).

Users with shared Amazon accounts must register any additional people accessing the account as secondary users to create their own passkey and log in separately.

*To add secondary users:*

1. Go to *Settings* and select *User Permissions*. 2. Select the desired account for the new user. 3. Enter the user’s contact information and select *Send invitation*. The secondary user will need a brand-new email address that has not been used on any Amazon account before. 4. Repeat for all new users that need to be added. 5. Request new users to follow the email instructions.

*Note*: Only users who have registered as secondary users will be able to set up a passkey and log in separately to the shared account. Once registered, secondary users can log in and create a passkey.

For issues setting up or using your passkey, our support team will respond in under 24 hours at Get help and resources. If you can't set up a passkey due to device or technical issues, contact Customer Service immediately.

If you lose access to your passkey, you can contact Customer Service to verify your identity and quickly regain access.

For more information, go to About Passkey and Use Passkey on Multiple Devices

To add secondary users:

    Go to Settings and select User Permissions.
    Select the desired account for the new user.
    Enter the user’s contact information and select Send invitation. The secondary user will need a brand-new email address that has not been used on any Amazon account before.
    Repeat for all new users that need to be added.
    Request new users to follow the email instructions.
Note: Only users who have registered as secondary users will be able to set up a passkey and log in separately to the shared account. Once registered, secondary users can log in and create a passkey.

For issues setting up or using your passkey, our support team will respond in under 24 hours at Get help and resources. If you can't set up a passkey due to device or technical issues, contact Customer Service immediately.

If you lose access to your passkey, you can contact Customer Service to verify your identity and quickly regain access.

For more information, go to About Passkey and Use Passkey on Multiple Devices.

The Amazon Services team

 help



The problem for me is I am on Linux devices and I can see this being a solution that will start to lock people out of there accounts if they don't have an approved device...

I doubt there is no passkey solution for Linux. Might not have a bundled one (maybe it will be added), but you could use something like KeePassXC, which is open source.

> Passkeys sync automatically across devices signed into the same Apple ID, Google account, or Microsoft account.

Do you have to be in one of those ecosystems? because I am on neither.


I don't think you have to. Those passkey managers just sync across devices for you as a convenience.

This will be an interesting passkey test. Much has been spilled about the complexity of passkeys for normal users but in many cases you can just not use them or they’re just tied to your personal smartphone for your personal Gmail/icloud

Amazon is an account that is shared by many between household. Will this cause user confusion


I was thinking about this article back in 2024[0]. What has changed, I wonder?

[0]: https://news.ycombinator.com/item?id=40165998


Passkeys are just to fingerprint machines, change my mind



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: