When a Passkey is added or deleted, a notification email is sent to your account email address.
If you did not personally add or delete the Passkey, someone else may have accessed your account. Please take the following steps immediately.
How to check and what to do
- Go to [My menu] > [Settings] > [Account], check the Passkey item under Security settings, and delete any Passkey you did not register yourself.
- Change your password immediately. You can change it under [Log in with email] > [Reset password].
- If you haven’t set up two-step verification (OTP authenticator app), we recommend setting it up.
Information shown in the notification email
The notification email includes the following information.
- Passkey name: The nickname set when it was registered
- Creation (or deletion) time: The time when the action occurred
- Creation environment: The environment where the Passkey was created (iCloud Keychain, Google Password Manager, 1Password, etc.)
- Access IP: The IP address of the environment where the action occurred
You can use this information to verify whether it was an action you performed.