Skip to content

Rename or remove one of my authenticators

Give one of your passkeys a clearer name, or remove a passkey or your authenticator app, for example when you replace a laptop or lose a security key.

Who can do it

Any person who signs in, for their own account. No role or permission is needed.

  • Rename is offered for passkeys only: an authenticator app has no name of its own.
  • Remove is offered for every passkey and for the authenticator app.

The console offers neither when you are acting in a tenant under support access (the Security item is absent from the account menu), or when your session came from your organization's identity provider and the platform holds no credential for you.

Before you start

  • A removal stops the authenticator from working at once and cannot be undone: to use it again, you add it again, and it becomes a new authenticator.
  • A removal that would leave you no way into one of your tenants is refused. Add another authenticator first.

Steps

To rename a passkey:

  1. Open the account menu in the header and select Security.
  2. Under Passkeys and authenticator app, find the passkey and select Rename.
  3. In Passkey name, type the new name, up to 100 characters.
  4. Select Save name.
  5. If Confirm your identity to continue opens, confirm with your own sign-in steps.

To remove a passkey or the authenticator app:

  1. Open the account menu in the header and select Security.
  2. Under Passkeys and authenticator app, find the authenticator and select Remove.
  3. In Remove this passkey? or Remove the authenticator app?, type the name the row shows, exactly as shown, then select Remove.
  4. If Confirm your identity to continue opens, confirm with your own sign-in steps.

What you see when it worked

After a rename, the console says "Passkey renamed." and the list shows the new name. Nothing else about the passkey changes.

After a removal, the console says "Authenticator removed." and the authenticator leaves the list. It signs you in nowhere from then on. If you removed the authenticator app, Add an authenticator app is offered again where your tenants admit one.

Both changes are listed under Recent security activity.

If it fails

What you see Cause What to do
"This is the last way you can sign in to one of your memberships. Add another passkey or authenticator app first, then remove this one. Nothing was removed." Removing it would leave one of your tenants with no authenticator its sign-in policy accepts. The console never names the tenant Add another authenticator that tenant accepts, then remove this one
A refusal saying no platform super administrator could sign in afterwards You are a platform super administrator, and no platform super administrator could sign in after the removal. Emergency access does not count Give another active platform member the super administrator role and a way to sign in first
"Give the passkey a name of up to 100 characters." The name is empty or too long Correct the name
"Does not match. Type it exactly as shown, including capitalization." The name typed in the removal step differs from the row's Type it exactly as shown
"This change requires you to confirm your identity again. Nothing was changed." The confirmation of your identity was closed or did not succeed Repeat the change and confirm your identity

Without the console

Surface How
API PATCH /api/v3/auth/account/authenticators/{authenticatorId} with displayName (operation updateAccountAuthenticator); DELETE /api/v3/auth/account/authenticators/{authenticatorId} (operation deleteAccountAuthenticator)