Passkeys and "Stripe User"

Sign in with passkeys in Chrome 124 on macOS 14.4.1

When logging in to the Stripe Dashboard with passkeys, you might notice the presence of a Stripe User option. Choosing this option to proceed with the login will result in a login failure. This is because the Stripe User option is not a passkey registered on your Stripe account. Instead, it represents a two-step authentication method that is registered on your account solely to be used as a second authentication factor during login or other forms of verification.

Background

Stripe supports different types of two-step authentication methods, some of which are based on the WebAuthn standard (e.g. Touch ID, Windows Hello, etc.). When Stripe launched support for these WebAuthn-based two-step authentication methods back in 2020, a platform agnostic name of Stripe User was chosen as the display name. This was fine at the time, as the display name was never needed directly to log in to your account. Furthermore, various platforms store the WebAuthn based two-step authentication methods differently: some store them completely on your device while others encrypt them and store the result with a Stripe server.

Passkeys are also based on the same WebAuthn standard, where the platform is explicitly directed to store the passkeys on your device. This allows you to have a passkey for each of your Stripe accounts on the same device and choose the Stripe account that you want to log in to. This also allows you to sync your passkeys across multiple devices, etc. With the launch of passkeys, each two-step authentication method stored on your device will now appear as a Stripe User option alongside your passkeys, which will always have an email address associated with them (the email corresponding to your Stripe account).

What can I do about them?

You don't need to do anything about these Stripe User options. However, if you want, you can rename them by following your platform-specific guide. For example, if you are seeing these Stripe User options when using Google Chrome, you can follow the management steps outlined here to rename them.

Note: When renaming the Stripe User options using your platform-specific guide, you might see an option to delete them completely. If you simply want to rename them, don't use the delete option – doing so will render them unusable as a two-step authentication method.

Did this answer your question?