How does SenseCrypt compare to passkeys — and can we keep ours?

SenseCrypt already carries passkey-like security on its own. At enrollment, your phone generates a signing key inside its secure hardware, and every sign-in ceremony is signed by that hardware-bound device key. The same possession proof makes passkeys phishing-resistant. The server holds only the public half, and no signature is accepted twice.

The difference is what sits on top. A passkey proves which device showed up — any face or finger that device has enrolled will satisfy it. SenseCrypt keeps the device-bound signing and adds the one factor a passkey can't carry: a live face check verifying that the enrolled person is actually present. Device-based signing plus person verification is strictly more proof than device-based signing alone — which is why SenseCrypt on its own is at least as strong as a passkey, and stronger where it counts.

And yes, you can keep your existing passkeys and MFA. SenseCrypt is additive: run alongside passkeys, your security floor is the passkey protection you already trust, and everything above it is upside. Platforms like Okta, Ping or Auth0 can delegate sign-in to SenseCrypt for one app or one user group as a pilot, while everything else stays where it is.