What is a Global Passkey?

Global Passkey lets you sign in to your Lincoln account using your device's built-in security features. Instead of typing a password, you simply use your device's unlock method – like your fingerprint, face scan, or device PIN/Pattern – to quickly and securely verify your identity. It is designed to be simple, convenient, and incredibly secure.

Global Passkeys offer several significant advantages over passwords:

• No Remembering: You do not need to create, remember, or type complex passwords.
• Enhanced Security: Global Passkeys are highly resistant to common online threats like phishing, data breaches, and credential reuse, making them much safer. They are built on strong technology, which is 99.9% secure.
• Speed: Signing in with a Global Passkey takes about 3–5 seconds, compared to 15–30 seconds or more with a password.
• Simplicity: No additional verification steps are typically needed, unlike passwords which have an optional Multi-Factor Authentication (MFA).

We are introducing Global Passkeys to enhance your digital experience and security. Traditional passwords are a common source of frustration – they are often forgotten, mistyped, and can lead to security risks if reused across different websites. By adopting Global Passkeys, we aim to:

• Provide a more positive and independent self-service experience.
• Strengthen your trust in our digital platforms.
• Significantly reduces the risk of account takeovers and data breaches.

You will have two main opportunities to set up a Global Passkey:

• During Account Creation: If you are creating a new Lincoln account through the Lincoln app or Lincolncanada.com, you will be offered the option to set up a Global Passkey immediately after registration.
• In Your Account Settings: If you are an existing client, you can set up a Global Passkey at any time by visiting the security section within your Lincoln app account settings.

Yes, you can choose to continue signing in with your username and password. However, for enhanced security, Multi-Factor Authentication (MFA) will become an optional step for all password-based sign-ins. This means you will need to enter a one-time code (e.g., sent to your phone or email) in addition to your password.

Global Passkeys are widely supported on most modern devices and browsers. 

• Apple^®: Over 1 billion devices (e.g., iPhones, Apple Watches, etc.) running iOS 17+ support Global Passkeys via iCloud.
• Android^™: Over 1.2 billion devices running Android 11+ support Global Passkeys via Google^™ Play.
• Browsers: Chrome^™, Safari^®, Edge^©, and Firefox^™ support Global Passkeys.

If your device or browser does not support Global Passkeys, you will simply sign in with your username and password with required MFA.

Global Passkeys use cryptographic keys, not personal data like your fingerprint image or face scan, to authenticate you. Your biometric information (fingerprint, face scan) never leaves your device and is not shared with Lincoln. Only the secure confirmation of your identity is sent to us.

Initially, your Global Passkey is directly registered and stored on the single device where you initially set it up. However, you will have the option to update the device in settings. We are exploring support for multiple devices in future updates to make your experience even more flexible.

Global Passkeys are incredibly secure. They are built following very modern and secure authentication standards, making them highly resistant to phishing and eliminating credential reuse. This significantly reduces the risk of data breaches and account takeovers, offering a much higher level of security than traditional passwords.

• Biometric Setup: Ensure your biometrics (fingerprint, face ID) are correctly set up and working for unlocking your device normally. If they are not, you will need to re-register them in your device's security settings.
• Cleanliness/Placement: Make sure your fingerprint sensor is clean and your finger is placed correctly. For face ID, ensure your face is well-lit and positioned correctly in front of the camera.
• Fallback to PIN/Password: If biometrics consistently fail, your device should offer a fallback option to use your device's PIN, pattern, or password to confirm the Global Passkey creation. Use this alternative method.

When you go to sign in to your Lincoln account, you will see the option to use your Global Passkey. Simply select it, and your device will prompt you to use your fingerprint, face scan, or device Personal Identification Number (PIN) to confirm your identity. It is that quick and easy!

Yes! If you are signing in on a different device (like a desktop computer) that does not have your Global Passkey registered, you can use your primary device (e.g., your smartphone) to authenticate. Here is how it works:

1. On the second device, the login screen will display a QR code.
2. Use your primary device (where your Global Passkey is stored) to scan this QR code.
3. Your primary device will then prompt you to verify your identity (e.g., fingerprint, face scan, or PIN).
4. Once verified, your primary device securely authorises the login on the second device, letting you sign in without typing anything there.

While biometrics are very convenient, they can sometimes have issues (e.g., wet fingers, changes in appearance, etc.). If your biometric scan fails, your device will automatically offer you the option to use your device's PIN, pattern, or password to authenticate and use your Global Passkey. This ensures you can always sign in.

For security reasons, we advise not using your Global Passkey on shared or public computers. In these situations, you can still sign in using your traditional username and password.

You can manage your Global Passkeys within the security section of your Lincoln app account settings. Here, you will be able to see which Global Passkeys are linked to your account and remove any old or unwanted ones (e.g., if you get a new device or lose one).

Here is how the cross-device login scenario typically works:

1. Initiate Login on Secondary Device (Device #2): When you attempt to log in to your Lincoln account on a device (e.g., a desktop computer) that does not have your Global Passkey registered locally, the login screen will display a QR code.
2. Scan QR Code with Primary Device (Device #1): You then use your primary device (e.g., your smartphone) where your Global Passkey is registered to scan the QR code shown on Device #2.
3. Verify Identity on Primary Device: Your primary device (Device #1) will prompt you to verify your identity using its built-in security features, such as scanning your face or fingerprint, or entering your device PIN.
4. Secure Authorisation of Login: Upon successful verification on Device #1, your primary device securely uses the Global Passkey to authorise the login request on Device #2. This allows you to seamlessly log in on Device #2 without needing to enter a username or password on that device. This process often involves a secure connection like Bluetooth^® between the two devices.

If you lose the device where your Global Passkey is stored, you will not be permanently locked out of your account. You can still recover access by signing in with your username and password. We recommend contacting your device provider for steps to secure or wipe your lost device.

We value your feedback! After successfully signing in with your Global Passkey, you may be presented with an option to provide a simple rating or indicate if the login process was easy or difficult. Your input helps us continuously improve the Global Passkey experience for everyone.

If your biometric scan (fingerprint or face scan) is not working, or if you prefer an alternative, your device will automatically offer you the option to use your device's PIN, pattern, or password instead. Enter that correctly to proceed with the Global Passkey authentication. If you continue to experience issues, you can always choose to sign in with your username and password.

Contact the Lincoln Client Relationship Center at 1-800-387-9333 or select Chat Now on the Contact Us page of lincolncanada.com for: 

• Technical issues with setting up, using, or managing your Global Passkey.
• Questions about your account details or needs.
• Account recovery assistance.

If you removed a Global Passkey from your account settings, you can easily set up a new one from within your account settings whenever you choose. If you lost the device with your Global Passkey, you can still access your account by logging in with your username and password. You can then set up a new Global Passkey on a new device.

Ensure:

• You are trying to log in using the device where the Global Passkey was originally registered or a device that has access to it (e.g., via iCloud Keychain on Apple^® devices, Google^™ Password Manager on Android^™/Chrome^™).
• Your device is unlocked and ready to authenticate you (e.g., with your face scan, fingerprint, or PIN).
• You have a stable internet connection, which is often required for the Global Passkey flow to communicate with the service.

• Bluetooth^® and Wi-Fi^®: For cross-device login (e.g., phone to computer), ensure both devices have Bluetooth and Wi-Fi enabled and are reasonably close to each other. They often communicate via these technologies.
• Operating System/Browser Compatibility: Make sure your operating system and web browser on both devices are up to date. Older versions might not fully support the latest cross-device authentication standards.
• QR Code Scan: Double-check that you are correctly scanning the QR code displayed on the secondary device with your primary device's camera.
• Prompt on Primary Device: After scanning, your primary device should show a prompt to authenticate. Ensure you complete this step by verifying your identity (face, fingerprint, PIN).

• Clean Sensor/Camera: Ensure your fingerprint sensor or camera lens is clean and unobstructed.
• Proper Placement: Make sure you are placing your finger correctly on the sensor or positioning your face within the camera's view as you normally would to unlock your device.
• Device Settings: Check your device's biometric settings. Sometimes, re-registering your fingerprint or face ID can resolve issues. If biometrics consistently fail, you might need to use your device's PIN or pattern as a fallback.

• Recovery is generally not possible: Once a Global Passkey is deleted or revoked, it cannot typically be recovered directly. Global Passkeys are designed to be device-bound or securely synced, but deletion is usually permanent from the service's perspective.
• Re-enrollment: You will need to re-enroll a new Global Passkey for that service. This usually involves logging in with an alternative method (like your username and password, if still available) and then setting up a new Global Passkey in your account security settings.

• Specific Error Message: Pay close attention to the exact error message. It might indicate a problem with the service, your device's security settings, or a network issue.
• Try Again: Sometimes, a temporary glitch can occur. Try the login process again.
• Clear Browser Cache/Cookies: For browser-based logins, clearing your browser's cache and cookies can sometimes resolve unexpected issues.

• Restart Device: A simple restart of your device can often clear up temporary software glitches.
• Try Another Browser/Device: If possible, try setting up the Global Passkey using a different web browser or on another compatible device you own. This can help determine if the issue is with a specific device or browser configuration.