World · Cybersecurity
Cloudflare Access adds passkey sign-in for enterprise applications
Source announcement date: 2026-11-06 · News/event date: 2026-11-06
In its announcement dated 6 November 2026, Cloudflare said passkeys can now be used to sign in to Access-protected applications and App Launcher. Users can use a passkey stored on a device, security key or password manager.
The sign-in method changes; access policy remains
According to the announcement, users must verify their identity once using an existing sign-in method before enrolling a passkey. Administrators can choose which applications accept passkeys and remove users’ registered passkeys.
The option is presented as an alternative to entering a one-time PIN or configuring an identity provider. A successful passkey verification does not grant access to every application: Access policies still determine what the user can access.
Quad Bilişim comment
Verifying a person’s identity and granting permission to a particular application are different decisions in enterprise identity management. This development adds a daily sign-in option while keeping access policy separate. Businesses should not assume that a new sign-in method automatically changes their entire authorization model.
Source
Cloudflare — Sign in to Cloudflare Access with passkeys, 6 November 2026