Signing in with a passkey

• A passkey replaces your password when you sign in. It's a secure sign-in key saved to your device or password manager. It only works between your device (or password manager) and MYOB, proving it’s really you without sending a password or showing you a code you could read or share . Your passkey stays on your device and never leaves it, so there’s nothing useful for scammers to steal from emails or fake websites.

• To sign in with a passkey:
  1. Choose the Sign in with passkey option.
  2. Confirm it’s you on a trusted device – for example with fingerprint or facial recognition (like Face ID or Touch ID), or your device PIN. The way you do this depends on your device and its security settings.

• Someone would need both your device and your unlock method to get in. Knowing your email address or password isn’t enough. Passkeys are also designed to stop phishing: they only work on legitimate MYOB sign-in pages and can’t be reused on fake websites.

Note:

• A passkey is optional and doesn’t remove your existing password. You can still sign in with your email and password if you need to.

• You can set up multiple passkeys, giving you more flexibility and backup options. See ‘Multiple passkeys give you more options’, below.

• A passkey doesn’t replace two-factor authentication (2FA), so you’ll still complete a quick 2FA check (like with an authenticator app or an SMS code) after using a passkey. Together, passkeys and 2FA provide strong protection for your MYOB account.

• An existing MYOB ID with 2FA set up (for example an authenticator app or SMS). 2FA is required when you add or sign in with a passkey.

• A passkey‑compatible browser and device on an operating system that supports passkeys:

  • iOS/iPadOS: Version 17 or later for passkeys in Microsoft Authenticator.

  • Android: Android 9 or later, with Android 14 or later recommended for enhanced features. Requires Credential Manager and Play Services.

  • Windows: Windows 11 (22H2) or later is recommended for better passkey integration and synchronisation.

  • Browsers: Latest version of Chrome, Safari, Edge, or Firefox that support WebAuthn are required.

  • Hardware Keys: FIDO2-compliant hardware security keys (for example, YubiKey) are supported.

    You must be using a supported operating system, browser or device to use a passkey

    If you're not, you won't see the option to sign in with a passkey. You can still sign in with your email and password.

• If you want to save the passkey in a password manager, like 1Password, you’ll need to have enabled it to sign in with passkeys.

1. Go to the Account security page in My Account (myaccount.myob.com/account/security).

2. If prompted, enter a 2FA code using your existing 2FA method or a recovery code.

3. In the Sign in section > Passkey, click Add.

4. If prompted, complete a 2FA check, then click Continue.

5. Click Add passkey.

6. Choose where to save your passkey (for example, your device, browser or password manager), then follow the prompts to add the passkey.
   
   When you’ve finished, the Account security page reappears with a banner confirming you’ve added the passkey. The new passkey is listed in the Sign in > Passkey section. You’ll also receive an email confirming you’ve set up a passkey.

Once you’ve added a passkey, you can add more. You can have a total of 5 passkeys.

1. Go to the Account security page in My Account (myaccount.myob.com/account/security).

2. If prompted, enter a 2FA code using your existing 2FA method or a recovery code.

3. In the Sign in section > Passkey, click Manage.

4. On the Passkeys page, click Add passkey.

5. If prompted, complete a 2FA check, then click Continue.

6. In the message that appears, click Add passkey.

7. Choose where to save your passkey (for example, your device, browser or password manager), then follow the prompts to add the passkey.

8. When you’ve finished, the Account security page reappears with a banner confirming you’ve added the passkey. The new passkey is listed in the Sign in > Passkey section. You’ll also receive an email confirming you’ve set up a passkey.

9. Repeat from step 3 for any other passkeys you want to add.

   If you reach the limit of 5 passkeys, you’ll be prompted to remove one before you can add another. See ‘Remove a passkey’, below, for the steps.

   
   

Once you’ve added a passkey to your MYOB ID, you can use it to sign in on supported devices.

1. On the MYOB sign-in page, click Sign in with passkey.
   

   If you don’t have a passkey set up on this device, or you've removed it, you’ll see an error. To sign in, enter your MYOB email address, click Sign in with password and enter your password.

2. On the Choose a passkey page, click your passkey.

3. Follow the steps in your device or browser to sign in with a passkey. For example, if you’re signing in with your phone, you may need to scan a QR code and, depending on your phone’s security settings, identify yourself via facial recognition, fingerprint or PIN.

4. If prompted, complete a 2FA check. The MYOB product or service you were signing in to will open.

1. Go to the Account security page in My Account (myaccount.myob.com/account/security).

2. If prompted, enter a 2FA code using your existing 2FA method or a recovery code.

3. In the Sign in section:

   1. (If you have only one passkey) Click Remove next to the passkey

   2. (If you have multiple passkeys) Click Manage, then click Remove next to the passkey you want to remove.
      

   

4. In the message that appears, click Remove passkey.

5. If prompted, enter a 2FA code using your existing 2FA method or a recovery code. The Account security page is updated with your passkey removal (if you no longer have any passkeys, the Manage button changes to Add passkey). You'll also be sent an email confirming that the passkey has been removed.

Remove the passkey from your device

Removing a passkey in My Account doesn’t remove the password or passkey from the device or password manager where you created it. You should remove them from your devices to avoid sign-in hassles caused by inactive passkeys.