# Passwordless authentication for customers. Nothing to remember, nothing to reset.

> Passwordless login for your web and mobile apps. Customers verify once with an email link or code, then each device signs them in with its own key.

Markdown version of <https://www.hawcx.com/passwordless/customers>. Last updated 2026-10-07.

Customers verify once with an email link or a code. After that, their own device signs them in, on the web and in your apps.

One customer, three visits

## Verify once. Then the device signs in.

- **A first check you choose**: An email link, or a code by email or SMS, the first time a device signs in.
- **A key on every device**: Made on the device and never exported or shared. Trusted devices sign in on their own.
- **Extra checks when it matters**: Push, a QR scan or an authenticator app, on every sign-in or only when one looks unusual.
- **Recovery that keeps the proof**: A lost phone takes only its own key. The customer verifies again, and the new phone makes its own.

## Every customer’s devices, in one place. Remove one without a reset.

Your team sees each device, its key and how it last signed in. Revoke a lost phone, and the others keep working.

## Built into your apps. Your screens, your brand.

SDKs for the platforms you ship on, and a plugin for WordPress. Hawcx does the proof underneath.

- iOS and Android: Native SDKs. The key is made in the phone’s secure hardware.
- Web and React: A React provider, or the web SDK for any site.
- React Native and Flutter: One codebase, the same sign-in on both phones.
- WordPress: A plugin, with no code to write.

```
import { HawcxProvider } from '@hawcx/react';
import { LoginFlow } from './LoginFlow';

export function App() {
  return (
    <HawcxProvider
      config={{ configId: import.meta.env.VITE_HAWCX_CONFIG_ID }}
    >
      <LoginFlow />
    </HawcxProvider>
  );
}
```

[Read the docs](https://docs.hawcx.com)

## Customer login questions, answered

[Passwordless authentication](https://www.hawcx.com/passwordless)

### How do customers sign in without a password?

The first time on a device, they verify with an email link or a one-time code. That device then makes its own key, unlocked with a biometric or device PIN, and signs them in from then on. There’s no password to type, reuse or reset.

### What is passwordless CIAM?

It’s customer identity and access management where customers create accounts and sign in without a password. Hawcx provides that sign-up and sign-in for your web and mobile apps, with a key on each customer’s device.

### Do customers need to install an app?

Customers sign in inside your own website and apps, which add Hawcx through SDKs for iOS, Android, Web, React, React Native and Flutter. They don’t need a separate Hawcx app. WordPress sites can use the Hawcx plugin instead.

### Can a customer use more than one device?

Yes. Each device gets its own key, made there and never shared, so a phone and a laptop each sign in on their own. A new device verifies once, then makes its key.

### What happens if a customer loses their phone?

The lost phone takes only its own key, and their other devices keep signing in. You can remove it in the Hawcx console, and the customer verifies again on the new phone, which makes a new key. There’s never a password to reset.

### Does Hawcx use passkeys?

No. Each device makes its own Hawcx key, which never leaves the device or syncs to another one. Customers sign in the same way on the web and in your apps.

### Does Hawcx detect bots or fraud?

No. Hawcx doesn’t score bots or transactions. It can ask for an extra check when a sign-in looks risky, such as too many tries or a sign-in from far away, and there’s no password for a stolen list to match.

## Let customers in without a password. From the first visit to the next phone.

- More on passwordless
- [Passwordless authentication](https://www.hawcx.com/passwordless)
- [Workforce SSO](https://www.hawcx.com/blog/hawcx-passwordless-sso-federation-the-next-evolution-of-enterprise-single-sign-on)
- [Phishing-resistant sign-in](https://www.hawcx.com/solutions/phishing-resistant-authentication)
- [Talk to sales](https://www.hawcx.com/contact)