Auth control plane
DiyaOS Passwordless identity

DiyaOS Auth

Device and Passkey Setup

Register passkeys and FIDO security keys for passwordless login and admin assurance.

Register Credential

Review session Recovery posture

Credential Guidance

Register at least one daily-use passkey Platform passkeys keep normal login fast and phishing resistant.
Add a cross-platform backup A FIDO2 security key or backed-up passkey gives the account a safer lost-device path.
Lost credentials should be replaced through recovery Use the lost-device path when the old credential also needs admin review and revocation.
Lost device
Ready to add a credential This prepares and completes a local WebAuthn registration contract. Production attestation verification remains a separate security slice.