Secure your online account with a passkey
It’s a way to confirm your identity using your smart device and your device's authentication methods, like face, fingerprint or PIN.
We now offer passkeys to some members as a login method for their regular online account. Passkeys aren’t available for use with our mobile app yet. We're rolling these out to all members in 2025.
If you use a smart device to access your account, a passkey can make login faster and easier.
What’s a passkey?
Your passkey is a secret, complex code stored on your smart device. Access to your passkey is based on fingerprint, face scan, or your device PIN – which makes it a phish-resistant multi-factor authentication method.
The passkey stays on your device and only fits your unique lock on your UniSuper online account.
Your passkey can’t be used elsewhere. You’re the only one with access to it and it can’t be shared or guessed like an email address or password.
Logging into your account with a passkey is easy. Just point the device camera at your face or touch the fingerprint sensor built into your device. Some devices ask for your device PIN instead.
How to set up a passkey
New members
New members are prompted to set up a passkey the first time they register and log into their online account.
- Complete registration for your UniSuper online account on your main smart device.
- A prompt to set up a passkey will appear as you start to log in.
- It takes just a second to set your passkey and complete your login. Follow screen prompts until set-up is confirmed.
Existing members
If you’re an existing member who’s now eligible for passkey set-up, or you skipped our prompt at registration, you can activate passkey set-up via your UniSuper online account.
- Log in to your online account with current credentials, using your main smart device.
- Navigate to ‘Profile’ > ‘Password and security’. Look for the ‘Passkeys’ heading under ‘Security preferences’ and click on ‘Set up a passkey’.
- A new screen prompts you to set a passkey as one of your verification methods. Click ‘Set up’ to proceed.
- Your device should now ask you to verify your identity with biometrics or PIN.
- A new screen confirms verification is complete and directs you back to your online account. Your new passkey is now ready for use and appears on the ‘Password and security’ page, listed with the name of your device.
What if passkey set up didn’t work?
Not all devices are compatible with passkeys. If you have an older device or smartphone, it may not be set up to handle passkeys.
Some privacy settings, ad blockers and out-of-date software can also affect passkey set-up. Check your settings and contact us if you need help troubleshooting.
Can I use a passkey on more than one device?
UniSuper passkeys are currently limited to one device. We’re working to extend this for use on multiple devices.
Until then, we recommend that you:
- Enrol a passkey on your most used smartphone or smart device.
- Use a password manager which syncs across all your devices.
Can I keep my password?
Yes. You can enrol a passkey and still use a password, together with an SMS verification code, to log into your online account. Password and SMS code are considered 2-factor authentication only when used together. However, passkey satisfies 2-factor all by itself.
Is a passkey mandatory for my UniSuper online account?
No. While we recommend adding a passkey because of the security benefits, you don’t need to add one.
What makes a passkey more secure?
Passkeys are phish-resistant by design. Biometrics (face or fingerprint) used to activate your passkey can’t be shared or used by anyone else.
Even if your device is stolen, a thief won’t have your biometrics to activate the passkey.
To confirm your passkey fits, all messages between your device and the lock on your account are encrypted.
Are my biometrics safe if I use a passkey?
Yes. Your biometrics (face or fingerprint) are never sent to remote servers.
We only ask your device to confirm it’s with you. Your device confirms (via biometrics or device PIN) that it’s with you and answers ‘yes’.
We then check that the passkey on your confirmed device fits the unique lock on your account. It’s simple, fast and secure.