Fingerprint / face sign-in (passkey)

Sign in on your phone or computer with one touch — fingerprint, face or screen lock instead of a password and 6-digit code; adding and removing devices, what to do if a phone is lost.

A passkey is a digital key stored on the phone or computer itself. You set it up once, then on the sign-in page you press “Sign in with fingerprint / face” and touch the sensor (or show your face) — no email, password or Authenticator code is asked. It works on phones (in the browser and in the SBT CRM Android app) and on computers (Windows Hello, Touch ID on a Mac).

It is safer than a password: the key stays only on your device, your fingerprint and face are never sent to the server, and the passkey works only on crm.sbt.az — it will not work on a fake (phishing) site. A passkey means both “you have the device” and “you are you”, so it also replaces the 6-digit code.

Set up on a phone (the easiest way)

A card “Sign in with fingerprint / face next time?” appears at the bottom. Press “Enable”.

The phone asks for your fingerprint, face or screen lock (PIN, pattern) — confirm. On Android the passkey is saved in your Google account (Google Password Manager), on iPhone in iCloud Keychain.

The message “Done — next time sign in with your fingerprint / face” appears.

If you press “Later”, the card is not shown again on this phone — you can set it up from the profile menu at any time (below).

Set up from the profile menu (phone or computer)

Click your name in the top right and select “2FA and fingerprint sign-in”.

At the bottom of the window there is a “Fingerprint / face sign-in” section. “Device name” is filled in automatically (e.g. “Chrome · Android”) — change it if you like, e.g. “My work phone”.

Press “Add this device” and confirm with your fingerprint / face / Windows Hello PIN.

The device appears in the list with its name, when it was added and the last sign-in time.

Open the sign-in page (or wait until the system returns you there after 30 minutes of inactivity).

Press “Sign in with fingerprint / face” — no need to type your email and password.

If the device has several accounts, choose yours from the list.

Touch the sensor or show your face — the CRM opens immediately, no 6-digit code is asked.

Remove a device

Profile menu → “2FA and fingerprint sign-in” → in the “Fingerprint / face sign-in” list press the bin icon next to the device.

Confirm. Fingerprint sign-in will no longer work on that device (email and password sign-in still works).

Rules

Each user can add up to 10 devices. The same device cannot be added twice.

A passkey needs a screen lock on the phone (fingerprint, face, PIN or pattern).

A passkey works the same on crm.sbt.az, on the company’s own address (e.g. company.crm.sbt.az) and in the Android app.

All other rules still apply: a deactivated or blocked user, a suspended company or a forbidden IP address cannot sign in with a passkey either.

Session rules do not change: after 30 minutes of inactivity or 8 hours you sign in again — now it is just one touch.

For admins the Authenticator (6-digit code) is still required — it is the backup way to sign in from a computer with password + code when the phone is not at hand.

You can only add and remove passkeys for your own account; they cannot be added in support (platform) mode.

The security log records “Device added for fingerprint / face sign-in”, “Fingerprint / face sign-in device removed” and “Successful sign-in” with a passkey (with the device name).