Passkeys allow you to securely sign in to the Stripe Dashboard with a biometric scan or using a hardware security key without ever needing to type a password. To ensure your account's security, we recommend against removing passkeys from your account. However, if you'd still like to proceed below are the steps to remove a passkey from your account.
- Go to your user profile.
- Click the three dots beside the passkey you want to remove and select Remove.
- Complete the verification step. Passkeys grant full access to your account. In order to remove them a verification step is required to confirm you have full control over the account.
- Once the verification step is complete the selected passkey will be removed from your Stripe account.
A note about complete deletion of passkeys
While the passkey has been removed from your Stripe account and is no longer usable, you may still see it as an option when signing in with passkeys. Any attempt to use this passkey will result in a login failure.
However, you might be wondering why you still see it as an option for sign in. This is in part due to the security properties of the underlying technology upon which passkeys are built: WebAuthn. One of the key security properties of passkeys is that the passkey credentials are stored on your device and are never shared with Stripe.
At a high level, when you register a passkey with Stripe, Stripe gets an identifier that is used to associate the passkey with your account. When you remove a passkey from your Stripe account you are effectively instructing Stripe to remove the association between the passkey and your Stripe account. However, because the passkey is stored on your device, Stripe has no control over the complete deletion of it from your device. To completely delete a passkey from your device (and thereby prevent it from showing up as an option during sign in) you will need to follow your device/platform specific guide on how to delete them. For example, if your passkey is stored in your Google Chrome profile, you can follow the management steps outlined here to delete them, among other things.