Your passkey for LUFF

When a LUFF app asks for your passkey, your device will name id.luff.works. That’s us. Your passkey lets your devices and apps into your library, and gets you back in on a new phone.

This site holds no keys and none of your data. Your passkey stays in your password manager, and your library stays in the storage you chose.

There’s no password, no email code and nothing to type. You sign in inside the app, not on this page.

Choose your passkey in the app

On a new device, the app finds your library and offers Use Passkey. When another app asks to join, choose Approve with Passkey or Security Key.
Check the name, then confirm

Your device asks to sign in to id.luff.works. Confirm with Face ID, Touch ID or your device passcode.
You’re back in

The app picks up where it left off. Every approval shows up in the app’s Library settings, under Access, where you can end it at any time.

When this device doesn’t have your passkey

Pick the other option on the same sign-in screen.

Use your phone

Choose the option to use a passkey from a phone or tablet. A QR code appears. Scan it with the camera on the phone that has your passkey, then confirm there.

Keep Bluetooth on for both devices. They need to be near each other.

Use a security key

Choose Security Key. Plug it in, or hold it to the top of your iPhone, then touch it when it blinks. Enter the key’s PIN if it asks.

A security key works only after you’ve added it to your library in the app’s Library settings.

Setting it up and finding it again

Create your passkey

In any LUFF app, open Library settings and choose Add a Device. The last step is Create Passkey. Save it in Passwords or the password manager you use.

Find it later

On iPhone, iPad or Mac, open the Passwords app, choose Passkeys and look for id.luff.works. It syncs to devices signed in to the same Apple Account. If you use another password manager, it’s there instead.

Keep it yours

We never ask for your passkey by email, chat or on a web page. A passkey can’t be read out or copied, so there’s nothing to hand over.
It works only for id.luff.works and the apps listed for it. A lookalike site can’t use it.
If a request appears that you didn’t start, choose Not Now. Nothing gets in without your approval.
Don’t delete it unless you have another way back in: another device that has your library, or a recovery kit.

If this site goes away

Your library still opens on the devices you’ve approved, and with a recovery kit if you made one. Approvals you already made stay valid, because checking them needs no website.

For app developers

Apps that follow the Colophon standard and pass its conformance tests can ask to be listed here, so they can use the same passkey. Write to support@luff.works.