Skip to main content
An Authorization Key proves it was you who started or approved a sensitive action in the Dashboard. When your organization requires one, the Dashboard asks you to sign with your key before the action is submitted. Your key can be:
  • A passkey, saved in a password manager such as iCloud Keychain, Google Password Manager or 1Password
  • A hardware security key, such as a YubiKey
You confirm each signature with your fingerprint, face or PIN. Each Dashboard user creates their own key, and one key works across every entity in your organization. Paxos must verify your key before you can use it.
Your Authorization Key is separate from the passkey you use to sign in to the Dashboard, even if both are in the same password manager.

​
Before you start

Creating a key takes a few minutes, but Paxos must verify it before you can sign. Set up your key early so you are not blocked when your organization starts requiring it. If you need a key, the Dashboard reminds you. Click Set Up Key to go to the Security page. Set Up Your Authorization Key banner at the top of the Dashboard

​
Create your key

​
➊ Open the Security page

Click the account menu in the bottom-left corner of the Dashboard, then select Settings > Security. Security page with an empty Authorization Keys section

​
➋ Name your key

In the Authorization Keys section, click Create Key, enter a name you will recognize, such as Work laptop or 1Password, then click Create Key. Create New Authorization Key dialog with a key name entered

​
➌ Register the key

A Paxos window opens on authorize.paxos.com (authorize.sandbox.paxos.com in Sandbox). Check that the name and email shown are yours, then click Start Registration. Register your Authorization Key window showing the key owner and the time left to register When your browser asks where to save the key, choose a passkey or a security key.
Save the passkey to a password manager that syncs across your devices, such as 1Password, iCloud Keychain or Google Password Manager in Chrome. If you replace or lose a device, your key is still available on your other devices.
Questions about passkeys?Start by contacting your IT organization. Your company may already have policies for using passkeys and can provide support when creating and using a passkey.Paxos recommends saving and using passkeys with:Learn more about using passkeys on the Paxos platform or try the passkey demo on https://passkey.org.
If the window does not open, allow pop-ups for the Dashboard and click Create Key again. You have 10 minutes to finish registering.

​
➍ Save your verification code

When registration finishes, the window shows a 16-character verification code in the format XXXX-XXXX-XXXX-XXXX. Copy it and save it somewhere safe, such as a secure note in your password manager. Save your verification code window showing a 16-character verification code
The code is shown only once. If you lose it, revoke the key and create a new one.
Select I have saved this verification code, then click Continue to Dashboard. Your key is not added until you click Continue to Dashboard, so do not close the window before then. Your key appears on the Security page as Unverified. Authorization Keys list showing a new key with the Unverified status

​
Verify your key

​
➊ Send Paxos your verification code

Complete the Verify Authorization Key form in the Customer Portal with your verification code and key name. You can also open the form from Request Verification on the Dashboard banner or the link on the Security page. Authorization Key Awaiting Verification banner with a Request Verification button
Setting up a team? Have everyone create their key first, then send all the codes in one form.

​
➋ Wait for Paxos to confirm

Once Paxos verifies your key, its status changes to Verified and the banner disappears. You can now sign actions. Authorization Keys list showing the key with the Verified status

​
Key statuses

​
If you lose your key

If you lose your only security key, or your passkey is no longer on any of your devices, the key cannot be recovered. To sign again:
  1. Revoke the lost key.
  2. Create a new key.
  3. Send Paxos the new verification code.
You cannot sign until Paxos verifies the new key, so start straight away.
Losing your Authorization Key does not affect how you sign in. If you have also lost your sign-in passkey, see Lost Access to Your Passkey.

​
Revoke a key

Revoke a key if you no longer use it, have lost it, or think someone else might have access to it.
  1. Go to Settings > Security.
  2. In Authorization Keys, open the actions menu on the key’s row and select Revoke Key.
  3. Click Revoke Key again to confirm.
Actions menu on an Authorization Key row with the Revoke Key option
Revoking a key cannot be undone. To sign again, create a new key and have Paxos verify it.

​
Frequently asked questions

Yes, for example a passkey and a backup security key. Paxos verifies each key separately.You may not need a second key if you save your passkey to a password manager that syncs, such as 1Password or Google Password Manager in Chrome. It is then available on all your devices.
Revoke the unverified key, create a new one, and send Paxos the new code.
Your key was not added. Click Create Key to start again. If your password manager saved a passkey from the unfinished attempt, you can delete it.
Authorization Keys appear only when your organization uses them. Contact your Dashboard administrator or Support.
Questions? Contact Support.