PIN or fingerprint? Passkey sign-in for school apps, explained
A school app holds children's records, parents' phone numbers and the school's money. Yet the way into it is often a four-digit PIN that the whole office knows. Passkeys are a newer way to sign in that fixes this without making anyone remember anything more.
What a passkey is, in plain words
A passkey lets you sign in with the lock you already use on your phone or laptop — fingerprint, face or screen lock. Nothing is typed. There is no code to remember, and nothing to tell a colleague over the phone. The device proves it is you, and the app lets you in.
Why it is safer than a PIN
A PIN can be watched over a shoulder, written on a sticky note, guessed, or shared "just for today". A passkey can't be read aloud or forwarded, and it only works on the device it was set up on, with that person's own fingerprint or face. It also can't be typed into a fake website by mistake, because there is nothing to type.
The safest secret is the one nobody has to remember — because it can't be shared, guessed or written down.
Who in a school should use one
Not everyone needs it. The people who gain the most are the ones whose login can move money or change records: the owner or Director, the principal, the accountant and the office staff who run the fee counter. For them, one extra minute of setup protects the whole school.
A PIN is still fine for most people
Parents and many teachers are better served by the simple phone number and school-issued PIN: it works on every phone, old or new, and anyone can be helped over a call. Passkeys should be an option beside the PIN, not a replacement that locks out a grandparent with a basic handset.
What happens if the phone is lost?
A passkey can't be used without the phone's own lock, so a lost phone is not an open door. The person signs in with their PIN on the new device and sets up a fresh passkey there. And when a PIN is changed or reissued, the old passkeys for that login should be cleared too — so that resetting someone's access really does reset it.
A sensible way to roll it out
- Keep phone number and PIN for everyone
- Ask the owner, principal and accounts staff to add a passkey
- Set it up on the device each person actually uses
- Review the list of passkeys when someone changes role or leaves
- Reissue the PIN whenever a phone is lost
SkoolPing keeps phone number and PIN sign-in for everyone, and adds "Login with Passkey" on the web console, the Android app and the installed web app, with a Passkeys screen to see and remove them. For the wider picture, see what principals should look for in school software.