🚀 Introducing passkeys and multiple 2-step verification factors to enhance your account security

We are excited to announce two major enhancements to Atlassian account security: the launch of passkeys as a password alternative and the introduction of support for multiple 2SV (2-step verification) factors. These features are now available to help you secure your Atlassian account with greater flexibility and ease.

Passkeys: A modern, secure alternative to passwords

Passwords have long been a weak link in account security, often reused or chosen for convenience rather than strength. Password often get leaked due data breaches that are out of your control and land up in hand of cyber criminals. With the introduction of passkeys, Atlassian is taking a significant step forward in protecting your accounts.

What are passkeys?

Passkeys are a secure, phishing-resistant alternative to traditional passwords. They leverage modern authentication standards to provide a seamless and highly secure login experience.

Why use passkeys?

  • Reduce the risk of account compromise due to weak or reused passwords.
  • Simplify the login process — no more remembering complex passwords.
  • Passkeys encapsulate 2SV in a single step, providing strong security with minimal friction.

Who can use passkeys?

You can enable passkeys for your account if it isn’t managed by an organization. Enable passkeys in your account settings. You can register multiple passkeys for convenience.

When you log in with a passkey, you won’t be prompted for additional 2SV, as passkeys already provide a form of 2SV by themselves.

Passkeys aren’t currently available to users whose accounts are managed by an organization.

How to enable and manage your passkeys

Multiple 2SV factors: flexibility and redundancy

We are also rolling out support for multiple 2SV factors, giving users and admins more flexibility and resilience in securing accounts.

What’s new?

You can now enroll and manage multiple 2SV factors (e.g., TOTP, security keys, SMS) via your account security settings. Any enrolled 2SV factor can be used as a second authentication step, reducing the risk of account lockout and improving redundancy.

Why is this important?

You are no longer limited to a single 2SV method, making it easier to switch or recover access if a device is lost. Organizations can enforce stronger security policies without sacrificing user experience. The flexibility to add, remove, or switch MFA factors empowers you to keep your accounts secure in a way that works best for you.

How to manage two-step verification for your Atlassian account

Get started

To enable passkeys or manage your 2SV factors, go to your Atlassian account security settings.

Atlassian is committed to providing the most secure and user-friendly authentication experience. Thank you for partnering with us to keep your accounts safe!

Introducing passkeys and multiple 2-step verification factors to enhance your account security