Test modeWhitechain Sepolia· WB Soul verification is simulated · test USDT only
tazor
Security & settingsDocs

Your approver passkey

Create the passkey you approve with, and the approver account that goes with it.

You approve payments with a passkey: a key your phone or laptop keeps in its keychain and unlocks with Face ID, a fingerprint or your device PIN (Windows Hello and Android work too). Tazor never sees it. Your approver account is a small smart account on Whitechain whose address is worked out from the passkey's public key.

Create your passkey

  1. Open Onboarding on taz0r.eth.limo.
  2. Choose Create passkey and confirm with your device's biometrics.
  3. Tazor shows your approver account address and asks the relayer to deploy it. Deploying is free for you.
  4. Send the address to your company admin, so they can give it the approver role on your company's ENS name.

Good to know

  • Passkeys belong to one website address. A passkey made on taz0r.eth.limo only works there. Passkeys made on localhost or preview sites are throwaway.
  • Passkeys are synced. iCloud Keychain or Google Password Manager copies them to your other devices. They are not tied to one phone.
  • Add a backup signer. An ordinary wallet address can be added as a second signer, so you can still approve if you lose access to your passkey. See Team and roles.
Your approval is checked on-chain: each approver account verifies the passkey signature using Whitechain's P-256 precompile.

Related

  • Team and roles Approvers, admins and agents, and how a backup signer protects against a lost phone.
  • Freeze a device Revoke your own approver for a company if your phone is lost or compromised.
  • Passkey check Sign a test challenge with this device's passkey and verify it on Whitechain's P-256 precompile.