> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aura.markets/llms.txt
> Use this file to discover all available pages before exploring further.

# Passkey Wallets

> A passwordless, non-custodial wallet secured by your device's biometrics.

Passkeys are a modern, secure, and user-friendly way to create and access your
Aura wallet. They eliminate the complexity of traditional crypto wallets while
maintaining full self-custody of your funds.

## What are passkeys?

Passkeys are a passwordless authentication standard (FIDO2/WebAuthn) supported
by all major devices and browsers. Instead of remembering a seed phrase or
password, your device's built-in security (Face ID, Touch ID, Windows Hello,
fingerprint, or PIN) acts as your key.

When you create a passkey wallet on Aura:

* A cryptographic keypair is generated securely on your device
* The private key is stored in your device's secure enclave (it never leaves
  your device)
* The public key is used to derive your Alephium wallet address
* Only you can authorize transactions using your biometrics or device PIN

## How passkeys work

<Steps>
  <Step title="Create your wallet">
    Choose a username and authenticate with your device (Face ID, fingerprint,
    etc.).
  </Step>

  <Step title="Your keys, your control">
    A unique cryptographic keypair is generated and stored in your device's
    secure hardware.
  </Step>

  <Step title="Sign transactions">
    Every trade, deposit, or withdrawal requires your biometric confirmation.
  </Step>

  <Step title="Cross-device access">
    Passkeys can sync across your devices via iCloud Keychain, Google Password
    Manager, or Windows Hello.
  </Step>
</Steps>

## Are passkeys non-custodial?

Yes, absolutely. Passkeys are fully non-custodial:

* Your private key is stored only on your device's secure enclave
* Aura never has access to your private keys
* Only you can authorize transactions with your biometrics
* You maintain complete control over your funds at all times

This is the same level of security as traditional self-custody wallets, but
without the risk of losing a seed phrase.

## Security benefits

| Property                    | Why it matters                                                                       |
| --------------------------- | ------------------------------------------------------------------------------------ |
| **No seed phrase risk**     | Nothing to write down, lose, or have stolen                                          |
| **Phishing resistant**      | Passkeys are bound to a specific website domain, making phishing attacks ineffective |
| **Hardware-level security** | Keys are protected by your device's secure enclave (TPM, Secure Enclave)             |
| **Biometric protection**    | Every transaction requires your face, fingerprint, or PIN                            |
| **No browser extensions**   | Reduces attack surface compared to browser-based wallets                             |

## Creating your passkey wallet

<Steps>
  <Step title="Open Aura">
    Visit [testnet.aurabets.io](https://testnet.aurabets.io/) and click
    **Connect**.
  </Step>

  <Step title="Choose passkey">
    Select **Create Passkey Wallet**.
  </Step>

  <Step title="Pick a username">
    Enter a username (this is just for your reference).
  </Step>

  <Step title="Authenticate">
    Approve with Face ID, Touch ID, or Windows Hello.
  </Step>

  <Step title="Done">
    Your wallet is created and you're ready to deposit funds.
  </Step>
</Steps>

## Recovering your wallet

Since passkeys sync across your devices:

* **Apple devices** — synced via iCloud Keychain
* **Android** — synced via Google Password Manager
* **Windows** — synced via Microsoft account

To access your wallet on a new device, simply click **Sign In** and
authenticate. Your passkey will be available if you're signed into the same
account.

<Warning>
  If you lose access to all devices **and** your cloud account, you will lose
  access to your wallet. Consider adding your passkey to multiple devices as
  a backup.
</Warning>
