Skip to main content

Cornell University

My Passkey Isn't Working

The most common reasons that passkeys don't work, with ways to fix the issue.

This article applies to: Secure Connect

Links may require a login to prevent malicious actors from trying to bypass your security measures.

If you have problems using your Secure Connect passkey, start with the following suggestions.

Confirm That Your Device Has A Passkey

Check that the device you're using has a passkey installed. Use the Beyond Identity self-service portal to view your list of passkeys and devices. Find the link to the self-service portal on Step 1 here. (Requires a login.)

If needed, you can add another device to your Secure Connect account, or set one up for the first time on a Cornell-managed device, or on a personal device. (Requires a login.)

Each device you want to use with one-touch login at Cornell needs to have its own passkey.

Check Your Browser Profile

If you use a browser with different profiles (for example, "work" and "personal"), it can act like a completely new browser for passkey login. Switch to the profile that you use your passkey with to fix the problem.

"Biometrics Prompt Was Canceled" Error

If you accidentally cancel the "Touch ID or enter your password" prompt, you will see the following message in your task bar:

Biometrics prompt canceled by user prompt

And your web browser displays the following error:

The screen displays "Cannot verify your identity"

Dismiss the alert, go back to the service you wanted to access, and log in again.

"Biometrics Prompt Timed Out" Error

If you don't use the Touch ID or Windows Hello, or enter a password or PIN within two minutes, Beyond Identity will display this "timed out" error in your task bar.

Biometrics timed out prompt

And show an error in your browser:

The screen displays "Cannot verify your identity"

Dismiss the Beyond Identity alert, go back to the service you wanted to access, and log in again.

I'm a Student Having Problems With Secure Connect

Secure Connect passkeys are only available to faculty and staff. Students currently can't get a passkey through Beyond Identity at Cornell.

"Authentication Error"

If Beyond Identity displays an authentication error, and you are a staff or faculty member, use a different browser to log in to the service you are trying to access. 

If all of your browsers are set to use passkeys, then open one of them in "incognito" or "private" mode to access the system with your NetID, password, and Duo login.

This problem should be temporary, but if it persists please contact the IT Service Desk to report it.

None of These Apply

This troubleshooting page documents less frequent issues with passkey login. If your problem persists, please contact the IT Service Desk for help.

Comments?

To share feedback about this page or request support, log in with your NetID

At Cornell we value your privacy. To view
our university's privacy practices, including
information use and third parties, visit University Privacy.