My passkey isn’t working due to an inactive certificate

This article describes the actions required to reset your credential on your device Authenticator so that you can log in again.

Issue

Authentication may fail even though a passkey is present on the device. This occurs when the certificate associated with the passkey is no longer active, preventing the passkey from being validated during login.

In this case, the following error may appear in the browser during the authentication process.

Solution

To resolve this issue, you must replace the affected passkey so it is backed by an active certificate. Follow the steps below.

Step 1: Remove the affected passkey

Remove the passkey from the device where the error is occurring.

For instructions, see Remove passkey from a device.

Step 2: Restore the passkey from another device

If the same passkey exists on another device and is working correctly (for example, a mobile phone), you can migrate that passkey back to the affected device.

Use the appropriate migration guide for your platform to restore the working passkey and complete registration on the device that encountered the missing certificate error.