How do security devices work?
A security device is a passkey (Face ID, Windows Hello, or a physical key) tied to one browser, used to prove it's you — separate from your security password. It gets you signed in faster; it never unlocks the encrypted vault on its own.
- Updated on
- 2 min read
On this page
A security device is a passkey registered to one browser on one physical device — Face ID, Windows Hello, or a physical key. It proves who you are, the same way a signature or a badge would. It is not the same thing as your security password, and it does not unlock the encrypted vault by itself: after signing in with a device, you still unlock patients, exams, files, and templates with your security password or recovery phrase, the same as always. See Why is my workspace encrypted for what stays locked either way.
Signing in with a registered device#
If a browser already has a security device registered, go to
sign.diagnos.health/login in that same browser. It recognizes the device
automatically and shows Sign in with my security device. Confirm with
Face ID, Windows Hello, or your key, and you're signed in to your diagnos
account — you'll land on the unlock screen next, where the password or
recovery phrase step above still applies.
If you open that page on a browser with no device registered, there's nothing to do there: open diagnos from the device where you usually sign in instead.
How a device gets registered#
You don't register a security device from a settings screen. The first time you complete an electronic signature ceremony on a given browser, that browser becomes your security device automatically — see Electronic signature for how that ceremony works. There's no separate enrollment step to look for.