lomi. logo

A passkey is not a second factor

A passkey gets you into the dashboard, and the authenticator app is still what we ask for before money moves.

By Engineering, Team
|
|News
An open barred vault gate in front of a room of locked safe-deposit boxes
Safe-deposit boxes behind the vault gate of the former University National Bank, Seattle. | Photo: Joe Mabel / Wikimedia Commons, CC BY-SA 4.0

Two questions keep a payments dashboard safe, and they come at different moments: who are you, and do you really mean to move this money?

A passkey answers the first. It signs you in on this device with your fingerprint, your face or the device PIN, in a browser that supports it, which is quicker than a password and much harder to phish. It is one way in among several, and all it proves is that you got in.

The authenticator app answers the second. We ask for its code when money is about to leave, as with a payout, and a passkey cannot stand in for it, however recently you signed in.

We ask for the authenticator at the moment money moves, because that is where the check matters, instead of locking the whole dashboard behind it. So set up both: the passkey to get in quickly, and the authenticator for the moments that cost money.

lomi. is payment infrastructure for francophone West Africa. Accept payments, send payouts, and automate financial workflows with ease. To learn more about what drives our product roadmap, read our blog, visit our GitHub, connect your AI agent to our services, or just create an account.