Set up & use a passkey in Pleo

A passkey is a highly secure, phishing-resistant way to sign in and approve actions in Pleo using your device’s built-in security (like Face ID, Touch ID, Windows Hello, or a PIN).

• Setting it up: Whether you're a new or existing user, simply follow the on-screen prompts the next time you log in.
• How it works: Once created, your passkey becomes your default login method, fully replacing passwords and SMS or authenticator codes
• 14-day setup window: You have 14 days from launch to set up your passkey

Device and browser requirements

Check that your device and browser support passkeys before starting setup. The feature documentation lists these minimum versions:

• Mobile operating system: iOS 16+ or Android 9+ 
• Desktop operating system: macOS 13 Ventura+ or Windows 10+.
• Browser: 
  • Safari 16.0+ on iOS or 16.1+ on macOS
  • Chrome 108+ 
  • Edge 108+ 
  • Firefox 122+ 

Your passkey is securely stored on your device or in your preferred password manager (like Apple Passwords or Google Password Manager) and will often automatically sync across your trusted devices.

• Where is it saved? The setup screen will always confirm exactly where your passkey is being stored when you create it.
• Unsupported devices: If your device doesn't support passkeys, please contact Pleo Support. Our team will help you explore alternative login options and guide you through the exception request process if needed.

Set up your first passkey

1. Sign in to Pleo and open the passkey setup prompt. If you opt to skip the prompt, you can activate it later:
   • Mobile: Account → Security
   • Web: My account → Security and devices
2. Confirm with your current password or Pleo passcode and the one-time code requested on screen.
3. On Set up a passkey, select Continue.
4. Follow the prompt from your browser or device to save the passkey.
5. Approve setup using your fingerprint, face, screen lock, or device PIN.
6. Wait for Pleo to confirm successful setup. Your passkey is then used for authorisation.

If your organisation uses SAML/SSO, continue using that sign-in method and then your Pleo passkey.

Sign in with your passkey

1. Enter your email address on the Pleo login screen.
2. Select Continue with passkey.
3. Follow the browser or device prompt.
4. Approve the sign-in using your device’s unlock method.

Use a passkey from another device

If your passkey is on another nearby device:

1. Select the option to use another passkey or device.
2. Scan the QR code with the device that holds the passkey.
3. Keep Bluetooth enabled on both devices and keep them close together.
4. Approve the request on the device with the passkey.

Confirm a sensitive action

Pleo may ask for your passkey again before showing or changing sensitive information. Follow the prompt in the same way as during login.

If setup or sign-in fails

See Troubleshoot passkeys. If you no longer have access to any enrolled passkey, see Recover access when you cannot use your passkey.