Wiki with Guides and Help Around Web Hosting

Security

Passkeys: sign in without a password

A passkey replaces your password with your device: you sign in using Face ID, your fingerprint, your device PIN or a security key such as a YubiKey. Behind the scenes there is a key pair – the secret half stays inside your device and never leaves it, while HOST-X only ever stores the public half. That means there is no password left for anyone to guess, intercept or reuse from someone else's data breach. We at HOST-X explicitly recommend passkeys as the safest and at the same time most convenient way to sign in to your customer area. Setting one up takes seconds: go to "Account" and open the "Passkeys" tab.

Steps

1 Sign in to the customer area, open "Account" and pick the "Passkeys" tab at the top.
2 Enter a name in the "Device name" field so you will recognise the device later – for example iPhone 15, office laptop or YubiKey. The field is optional but keeps your list tidy.
3 Click "Add new passkey". Your browser now asks for Face ID, your fingerprint, Windows Hello, your device PIN or your security key – confirm and you are done.
4 The passkey shows up in the list right away, with its creation date and last use. Use the pencil icon to rename it and the bin icon to remove it.
5 Next time you sign in, simply choose "Sign in with passkey": confirm on your device and you are in – no password and no 2FA code.
6 Repeat this on a second device. Two passkeys are our clear recommendation so you still get in if one device goes missing.

Passkeys at a glance

Where to set up: Customer area → Account → "Passkeys" tab
Where to sign in: Login page → "Sign in with passkey" button
What you need: Face ID, Touch ID, a fingerprint reader, Windows Hello, a device PIN or a security key (e.g. YubiKey)
Browsers: Current versions of Chrome, Edge, Safari, Firefox or Brave
Systems: iOS/iPadOS 16+, macOS Ventura+, Android 9+, Windows 10/11
Number of passkeys: As many as you like – we recommend at least two devices
Standard: WebAuthn / FIDO2 – an open industry standard backed by Apple, Google, Microsoft and others
Stored by us: Only the public key, your device name and timestamps – no fingerprints, no face data
Cost: None – passkeys are included in every HOST-X plan

iPhone, iPad and Mac (Face ID / Touch ID)

1 Open the customer area in Safari or Chrome, sign in and go to Account → Passkeys.
2 Enter a device name such as iPhone 15 and tap "Add new passkey".
3 Confirm the system prompt with Face ID or Touch ID. Your device passcode works as an alternative.
4 If you are signed in to the iCloud Keychain, the passkey is automatically available on your other Apple devices too.
5 To test it, sign out and choose "Sign in with passkey" on the login page.

Android phone

1 Open the customer area in Chrome, sign in and go to Account → Passkeys.
2 Enter a device name and tap "Add new passkey".
3 Android asks where the passkey should be stored – usually the Google Password Manager. Confirm the choice.
4 Confirm with your fingerprint, face unlock or screen lock.
5 Via the Google Password Manager the passkey works on all Android devices using the same Google account.

Windows PC with Windows Hello

1 Open the customer area in Edge or Chrome, sign in and go to Account → Passkeys.
2 Enter a device name such as office PC and click "Add new passkey".
3 In the Windows dialog choose "This device" if you want to keep the passkey on this PC.
4 Confirm with face recognition, fingerprint or your Windows Hello PIN.
5 Note: a passkey stored on "this device" stays on this PC. Create a separate passkey on your phone.

Security keys (YubiKey and friends)

1 Open Account → Passkeys and enter a device name such as blue YubiKey.
2 Click "Add new passkey" and pick "Security key" in the browser dialog.
3 Plug in the key (or hold it against your phone via NFC) and enter the key PIN if you have set one.
4 Touch the gold contact or the button on the key – that registers the passkey.
5 A security key is the strictest option: without the physical key nobody gets into your account.

Lost or replaced your device

1 Sign in with another passkey or with your password – you never lose access.
2 Open Account → Passkeys and delete the entry for the lost device using the bin icon.
3 Create a fresh passkey on your new device straight away.
4 A stolen device on its own is not enough for an attacker: without your biometrics or device PIN the passkey cannot be used.
5 If you are truly stuck, write to our support with your customer number and a short description.

Frequently asked questions

1 Can HOST-X see my fingerprint? No. Biometrics are checked by your device alone and never leave it. We only hold the public key.
2 What about phishing mails? A passkey is bound to host-x.de. On a copied website it simply does not work – which is exactly what makes it so much better than a password.
3 Do I still need 2FA? Not when you sign in with a passkey. The passkey already is two factors in one: your device plus your fingerprint, face or PIN.
4 Can I keep my password? Yes. Password and passkeys work side by side. The option to switch password login off entirely is on its way.
5 What does it cost? Nothing. Passkeys are included in every HOST-X plan and take less than a minute to set up.