Hi everyone,
I was wondering if anyone has experience adding multiple passkeys to the same user account.
I have set up on key already with the password manager, but am trying to set up a second one on the phone only. The issue is the second attempt will say no matching passkeys found as it is already searching for existing.
Alternatively, is it possbile to keep the passkey setup with the password manager, and add a second physical security key in addition, and have the option to use either one of them?
Thanks for the help!
Marie Olsen
#Login Attempt #Multi-Factor-Authentication #Security
Hi Marie - yes, Salesforce supports registering more than one passkey/security key on the same account, and you can use any of them to log in. The behavior you're hitting is the classic passkey gotcha: adding a second one has to be done from the registration flow in your settings, not from the login screen.
Here's what's happening: at the login prompt, the browser/OS is trying to authenticate, so it searches for an existing passkey - that's the 'no matching passkeys found / searching for existing' message. That flow only looks for credentials already registered; it will never create a new one. So the second passkey has to be enrolled from inside your account.
To add another one: log in with your existing (password-manager) passkey, then go to your personal Settings and find the security-key / built-in-authenticator registration area (in Lightning it's under your personal Settings - look for Advanced User Details, which has the register links for a security key or built-in authenticator). Start the registration there, and when the passkey dialog appears, choose the new target - your phone, or 'use a different device' - rather than the saved password-manager one. That enrolls a second, independent credential.
On your alternative question: yes, you can absolutely keep the password-manager passkey and add a physical security key as well. Register the physical key the same way (from settings, not login), and at sign-in you can use whichever one you have on hand. Mixing a platform passkey with a roaming security key is exactly the kind of redundancy passkeys are meant to allow - having a backup method registered is a good idea.
One thing to watch: start each new registration from your account settings while you're already logged in, and pick the specific device when the OS dialog pops up - browsers love to default back to the passkey you already have.
Hope that gets your second one enrolled!