Why am I asked for a passkey?
Owners and Admins confirm every change with a passkey, and the most sensitive ones need a passkey you have had for at least 24 hours.
Last updated November 2, 2026
Owners and Admins can change who has access to an organization, so their changes need the strongest proof. You can sign in with an authenticator app and view everything, but each change is confirmed with a passkey. This is enforced in our database and is not a setting.
Which passkeys count
For most Owner and Admin changes, such as inviting people or changing an Approver's role, a passkey counts if:
- you have had it for at least 24 hours, or
- you added it when you first set up your account.
The most sensitive changes
These need a passkey you have had for at least 24 hours that was itself added in a session confirmed with a passkey:
- granting the Admin role;
- removing or demoting an Admin;
- transferring or accepting ownership;
- deleting the organization.
The passkey from your account's first setup does not skip the 24 hours here.
Why the waiting time
If someone briefly got into your account, for example with a phished authenticator code, they could add their own passkey. The waiting time means that passkey can't be used for these changes straight away. You get an email as soon as a sign-in method is added, and This wasn't me removes methods added in the last 24 hours. A passkey added after a recovery-code sign-in never counts.
If you don't have a passkey that counts
- Use another passkey you have had for longer, or try again once your new passkey is 24 hours old.
- To add a passkey, see Passkeys. Add it while signed in with a passkey, so it counts for the most sensitive changes later.
- If none of your passkeys can count, email support@lightinventory.com from the address you sign in with. We help you through it after checking it is really you.