Documentation / Buyer Verification

Passkeys

Passkeys are hardware-bound biometric credentials that tie a buyer's identity to their physical device. When you enable the Passkey verification rule, buyers must complete a Face ID, Touch ID, or Windows Hello challenge on your storefront before FairDrop lets them proceed to checkout.

How it works

The first time a buyer adds a protected item to their cart, FairDrop prompts them to register a passkey. The registration uses the Web Authentication API (WebAuthn) and never leaves their device — FairDrop stores only a public key, not a fingerprint or face scan.

1

Buyer adds item to cart

FairDrop detects a protected product and shows the passkey prompt on the storefront.

2

Biometric challenge

The buyer completes Face ID, Touch ID, or Windows Hello. First-time buyers register; returning buyers just verify.

3

Checkout proceeds

FairDrop marks the session as verified. The checkout Function confirms the mark and allows the order.

What your customers see

The whole thing happens in a single prompt on your storefront — no redirect, no account page, no app to install. A first-time buyer sets up their passkey and is verified in one flow; everyone after that is a single tap.

Merchant Store

Set up your verification

To shop protected drops, we use your device biometric — like Touch ID or Face ID. Quick to set up, private, and nothing is stored.

Not nowSet up passkey
Secured by FairDrop
Step 1 · First-time only
Set up the passkey
Merchant Store

One tap to verify

We use your device biometric to confirm real buyers. Quick, secure, and private.

CancelVerify
Secured by FairDrop
Step 2 · Every time
One tap to verify
Merchant Store

You’re verified!

Your passkey was accepted. Adding to cart now…

Secured by FairDrop
Step 3
Verified — adding to cart

If something interrupts the flow

Two more prompts cover the edge cases, so a buyer is never left stuck. Both use the same one-tap pattern.

Merchant Store

Just checking it’s still you

It’s been a few minutes. One quick biometric check and you’re good to go.

CancelVerify
Secured by FairDrop
At checkout · if time passed
Just checking it’s still you
Merchant Store

Verification failed

We couldn’t verify your passkey. Please try again, or cancel and use a different device.

If this keeps happening, try signing out and back in to re-register your passkey.

CancelTry again
Secured by FairDrop
If a check fails
Try again or switch devices

First-time vs. returning buyers

First-time buyer

When a buyer has never registered a passkey with your store, FairDrop shows a registration prompt. The browser uses the device's secure enclave to create a key pair and stores the private key locally. This takes a few seconds and requires no setup from the buyer in advance.

Returning buyer

On subsequent visits the buyer sees a verification prompt instead of a registration prompt. The challenge is completed with a single biometric gesture — typically under two seconds.

Requires Account required

Passkey verification depends on the buyer being signed in. The Account required rule must be enabled on the same policy — FairDrop will not let you enable Passkey verification without it.

Browser and device compatibility

Passkeys work on any device that supports the Web Authentication API. This covers the vast majority of modern consumer hardware.

PlatformPasskey method
iPhone / iPad (iOS 16+)Face ID or Touch ID
Mac (macOS Ventura+)Touch ID or Apple Watch
Android (9+)Fingerprint or face unlock
Windows 10/11Windows Hello (fingerprint, face, or PIN)
Chrome on desktopPlatform authenticator on the device
← Previous
Drop Day Checklist
Next →
How it Works