Mitra OS Wiki
Browse the wiki

Passkeys

Security · feature · Updated

Not every capability described on this wiki is available today.

Quick answer

A passkey replaces your password. Mitra OS stores it in your device's secure hardware, so sign-in is passwordless and cannot be reused on another site.

Summary

Mitra OS sign-in is device-bound. On iOS the key lives in the Secure Enclave, on Android in the Android Keystore, and in the browser sign-in uses WebAuthn. You approve with your device's biometrics or screen lock.

Key takeaways

  • Passkeys replace passwords entirely.
  • Keys are bound to your device's secure hardware.
  • iOS uses the Secure Enclave, Android uses the Keystore, browsers use WebAuthn.
  • Sensitive actions ask for a fresh biometric on top of sign-in.

How it works

When you sign in, your device proves possession of a private key without revealing it. You approve using your fingerprint, face or device lock.

Platform support

  • iOS: Secure Enclave.
  • Android: Android Keystore.
  • Web: WebAuthn.

Beyond sign-in

Signing in does not authorize everything. Money, health data and irreversible bookings need step-up confirmation.

Frequently asked questions

What is a passkey?

A passkey is a cryptographic credential stored on your device that proves who you are without a password.

Why are passkeys safer than passwords?

There is no secret to guess, reuse or phish, because the private key never leaves your device's secure hardware.

What if I lose my device?

Account recovery details are not published yet. Contact help@mitraos.ai for current guidance.

People also ask

feature Step-up confirmation Why Mitra OS asks for a fresh biometric confirmation before money, health data or irreversible bookings, even if you are already signed in. feature Identity and the Vault How Mitra OS approaches verified identity with the Vault module, device-bound sign-in, and confirmation steps for sensitive actions. feature Mobile app and web companion Mitra OS is being built with native iOS and Android apps and a web companion. Learn what that means and why sign-in is tied to your device. guide Security overview An overview of how Mitra OS is designed to protect members: passwordless sign-in, confirmation for sensitive actions, grounded AI and audit logs.

Glossary terms on this page

  • MITRA: MITRA is the orchestration platform behind Mitra OS. Mitra is the name you talk to, and Mitra OS, Inc. is the company that builds it.
  • Step-up: Step-up is an extra, fresh biometric check required before a sensitive action, even when you are already signed in.

Sources

Last updated . Last reviewed .