Skip to main content

​
Conditional UI Flow (Usernameless Login)

The Conditional UI flow is automatically triggered by the browser/OS when passkeys are available. This is a usernameless login flow - users don’t enter their username first. On iOS, passkeys appear on the keyboard’s suggestion bar. The system presents all available passkeys for the app, and determines the user’s identity after they select and authenticate with their passkey.
Key Technical Detail: The system doesn’t know which user is logging in until AFTER they select their passkey. This usernameless approach enables the seamless experience where all available passkeys are shown upfront.
  • iOS
autosuggested-passkeys-ios-native.png

Native: iOS Conditional UI flow

Product-Native Steps: The blue background indicates optional product-native steps (e.g., verification code, setup PIN, enabling biometrics). PIN and local biometrics are optional features for protecting app access within sessions after passkey authentication completes. Learn more about how passkeys and local biometrics work together to provide both secure remote authentication (passkeys) and convenient app protection (local biometrics).
1

Conditional UI automatically triggered

  • When the user taps on the email field, the OS automatically triggers Conditional UI, displaying ALL available passkeys for the app on the keyboard’s suggestion bar.
  • Note: This is usernameless - the system doesn’t yet know which user is trying to log in.
2

Authenticate using the selected passkey

  • The user taps their passkey from the available options on the keyboard, which identifies them to the system.
  • Upon selection, the system now knows which user account is attempting to authenticate.
3

Device verifies user

  • User verifies their identity using their screen lock (e.g., fingerprint, PIN, or face recognition).
  • After successful verification, the system completes the login for the identified user account.
4

App PIN setup

  • After successful passkey authentication, the user is signed in and is asked to set up PIN.
5

Enable local biometric for app login

  • User is allowed to enable/disable local biometric app login (provided as product feature).
⌘I