How to Set Up a Passkey in NetSuite and Log In Without a Password

The screenshots show sample data. Person and operating-company names are fictional. Use your own values when following the steps.

Before you start

This guide covers an employee who signs in directly with a NetSuite password, on an account running release 2026.2 or later. Passkey login depends on your account's security setup, so it may not be on for every account. If you don't see Manage Passkeys in your Settings portlet, check that your account is on a supported release and that your role and sign-in method allow passkeys, then ask your administrator. The portlet can also be moved or customized. SSO users and Customer Center users may sign in differently and may not get the New Passkey page at all.

You'll need your current NetSuite password and a browser, device, or password manager that can create and approve a passkey. A fingerprint reader isn't required. Your device may ask for a face scan, a device PIN, a security key, or a QR code on your phone instead. The prompt in step 2 comes from your browser or operating system, not from NetSuite. In the example it's Chrome offering Google Password Manager, so its wording and the passkey name will differ if you use Safari with iCloud Keychain or another provider. The recording doesn't show that prompt.

The example user is a controller who wants to stop typing her password on her work laptop. Her Passkeys page starts empty.

01. Open Manage Passkeys

On the Home dashboard, find the Settings portlet and click Manage Passkeys. The Passkeys page lists each passkey by Name and Created date. When you haven't set one up, it says "You don't have any Passkeys yet."

Enlarge

Enlarge

02. Create the passkey and confirm your password

Click Create New. The New Passkey page asks for your Current Password, which means only the signed-in user can add a passkey. Type your password and click Next.

Your browser or operating system then asks whether to create a passkey for NetSuite. Approve it with your fingerprint, face, or device PIN.

Enlarge

03. Check the new passkey

NetSuite returns to the Passkeys page with a green confirmation that says "Passkey has been successfully created". The list now has one row. The Name comes from whatever holds the passkey, so here it's Google Password Manager. On your device it may be a different provider. Created shows the date and time in your account's format, here 10/7/26, 9:12 AM, which is month, day, year. Each row has an edit icon and a delete icon on the right.

Enlarge

04. Log in with the passkey

To test it, sign out first. In the example, NetSuite shows "You are successfully logged out." with a Log back in button. Click it to reach the login page. If you'd rather not sign out, a private browser window gets you to the same page.

Enlarge

Type your email address. Leave Password empty and click Log In with Passkey, not Log In. Your device asks you to confirm, and the recording doesn't show that prompt either. NetSuite then signs you in without a password. In the example it opens the Home dashboard. If your email has more than one account or role, you may see a selection page first.

Enlarge

Enlarge

Check the result

1. The Passkeys page showed "Passkey has been successfully created" and a row with a Name and a Created date.
2. On the login page, Password was empty when you clicked Log In with Passkey.
3. NetSuite opened the Home dashboard after you approved the prompt on your device.

Your password still works if your user has direct NetSuite password sign-in. A passkey replaces the password at login only, and NetSuite may still ask for your password for other actions. Keep your password and any recovery method your company requires.

Common questions

Why does NetSuite ask for my current password when I create a passkey?

So that only the signed-in user can add one. Once you click Next, the browser or operating system takes over the passkey setup.

Will my password still work after I create a passkey?

For a user with direct NetSuite sign-in, yes. Creating a passkey doesn't change or turn off your password, and NetSuite may still ask for it for other actions. Keep it, along with any recovery method your company requires.

Do I need a separate passkey for each device?

Usually, yes. Create one on each device where you want to skip the password. Some password managers sync passkeys across your devices, but that's up to the browser or provider, not NetSuite.

What do I do if I lose a laptop that has a passkey?

Delete its row on the Passkeys page. NetSuite then stops accepting that passkey. The copy on the laptop or in its password manager stays where it is, so remove that there too. If you can't get into your account, an administrator can open the User Access Reset Tool under Setup > Users/Roles and choose Clear user's Passkeys, which removes all of your passkeys, not just the one on the laptop.

Do I need a separate passkey for sandbox and production?

Yes. A passkey belongs to the web address you created it on, so a passkey made in production won't work in a sandbox, and the reverse. Create one in each environment where you want it.

Does a passkey count as two-factor authentication?

It can. For a role that requires two-factor authentication, a passkey can count as the second factor, unless your administrator has turned that off. Check with your administrator before you rely on it.

Why don't I see Manage Passkeys or Log In with Passkey?

Passkeys depend on your account's release, security setup, role, and sign-in method. SSO users and Customer Center users may not get them, and the recording only covers a direct NetSuite login. Check that you're on the usual login page for your environment, then ask your administrator whether passkeys are available for your user.