You have three recovery paths in order of speed.
Fastest: redeem a recovery code.
- If you saved your 10 recovery codes when you first enrolled a passkey, you can use one to recover
- On the sign-in page, click "Use a recovery code" instead of signing in with a passkey
- Enter your email and one of the codes. On success, all existing passkeys are invalidated and you are required to enroll a new passkey immediately.
- See the recovery codes question above for details
If you have a second passkey on another device
- Apple. Passkeys stored in iCloud Keychain sync to every device signed into the same Apple ID. If you still have a Mac, iPad, or another iPhone signed in, try signing into oakallow there. The passkey will be available.
- Google. Passkeys in Google Password Manager sync across Chrome on any device signed into the same Google account.
- 1Password, Bitwarden, Dashlane. Passkeys stored in your password manager are available everywhere that manager is installed and unlocked.
- Hardware keys (YubiKey, Titan). Not synced. If the key is lost, use a recovery code or contact support.
If you have access from another device, sign in with that one, then go to the Security page and remove the lost passkey. Add a new passkey on your replacement device from the same page.
Last resort: contact support.
- If you cannot access any enrolled passkey and have no recovery codes left, email support@oakallow.io from the address on your oakallow account
- Include your account email and a brief description of what happened (lost device, wiped phone, hardware key lost, etc.)
- We will verify ownership and reset the passkey requirement so you can sign in with email OTP and enroll a new passkey
- Turnaround is typically under one business day
To make future recovery easier, we strongly recommend enrolling at least two passkeys (for example one on your phone and one on your laptop, or one in a password manager and one on a hardware key) and keeping your recovery codes in a separate location from your devices. You can add additional passkeys any time from the Security page.