Using passkeys and security keys

Passkeys and security keys make logging in to Mercury faster and more secure. Here's how to set them up and use them

Setting up a passkey or security key

Right after you submit your Mercury application, you'll be prompted to set up two-factor authentication. Follow the on-screen steps to create your first passkey.

If your account is already open:

1. Go to Settings > Security
   • To add a passkey: Under Passkeys, click +Add passkey to store a passkey in your browser or cloud service, or click +Add passkey via QR code to store a passkey on a mobile device
   • To add a physical security key: Under Two-factor authentication, click +Add security key
2. Verify your identity
3. Follow your browser’s prompts to create the passkey
    

Logging in with a passkey

1. Go to the Log In page on mercury.com 
2. You’ll be prompted to use your passkey (as long as it’s supported by your device). If you aren't prompted immediately, click Continue with passkey
3. Select your saved Mercury passkey to sign in

Logging in with a security key

1. Enter your email and password at mercury.com
2. On the 2FA screen, click Use security key instead
   • If you check Trust this device for 30 days, you can skip 2FA next time on that browser
3. Authenticate using your security key

Adding a passkey to a new device

To login from a different device, you can either sync an existing passkey to that device, or add a new passkey to that device. 

Cloud Services (recommended method): If you use iCloud Keychain, Google Password Manager, or 1Password, your passkey syncs automatically across any device where those apps or extensions are installed. This is the easiest way to stay logged in across devices.

To add a passkey to a new mobile device: 

1. On a computer, log in to Mercury and go to Settings > Security
2. Click Add passkey via QR Code
3. Scan the QR code with your phone and follow the on-screen instructions

To add a passkey to a new computer using a 2FA code or backup code:

1. Log in to Mercury on your new computer with your password and 2FA code or a backup code
2. Go to Settings > Security and click Add passkey
3. Follow the on-screen instructions to add a passkey to the computer

To add a passkey to a new computer without using a 2FA code or backup code:

1. First you’ll need a passkey on a mobile device. If you don’t already have one, follow the steps above to add a passkey to a mobile device
2. On the computer, log in with your password at mercury.com
3. When prompted for a passkey, scan the QR code with the phone that has your passkey to login 
4. Go to the Settings > Security and click Add passkey
5. Follow the on-screen instructions to add a passkey to the computer
    

FAQs

What is the difference between a passkey and security key?

Both verify your identity, but they work differently.

Passkeys:

• Encrypted digital credentials stored in the cloud (e.g., iCloud Keychain, Google Password Manager, 1Password)
• Can be created using Face ID, Touch ID, USB keys, YubiKeys, or other NFC devices
• Act as both your password and your second factor — no separate 2FA code needed
• Let you log in with one click across any device signed into the same cloud account
• Can be used to regain access if you lose your 2FA codes

Security keys:

• Physical USB or NFC devices, or digital credentials used as a second factor
• Do not replace your password — they supplement it
• Must be plugged in or tapped to authenticate
• Work only on the device and browser they were registered to

For most users, passkeys stored in a cloud manager like 1Password, Google Password Manager, or iCloud Keychain are the easiest and most secure option.

Do I still need a 2FA app if I use a security key?

No, but you’ll need to keep your backup codes handy in case you’re unable to use your security key in the future.

I’ve lost access to my security key or passkey. What should I do?

No problem, life happens. If you have other identifiers registered like a 2FA app, you can choose to log in with one of those methods. Otherwise, use one of the single-use backup codes provided when you created your security key or passkey. 

If you’ve lost access to your 2FA codes, follow these instructions to reset them: Resetting your 2-factor authentication (2FA) – Mercury.

If all else fails, contact our support team at help@mercury.com. 

Once you’ve logged in, make sure to remove any lost security keys from your account by going to Settings > Security.

My security key/passkey isn’t working or I'm logging in from a new device. What should I do?

Biometrics sometimes misread. Try again once or twice before troubleshooting further. If you're using a mobile device as your key, make sure it's close to your computer with Bluetooth and internet enabled on both devices.

If you’re still having issues, use a 2FA app or backup code to log in instead, or contact our support team at help@mercury.com. Please provide as much information as possible (browser name/version, type of security key, screenshots) and we can help resolve the issue.