> ## Documentation Index
> Fetch the complete documentation index at: https://docs.orbit.devotel.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Verify passkey

<Note>
  **No dashboard screen — passkeys are driven from your own application.** A
  WebAuthn passkey is registered and used where the end user is present: your app
  requests options from these endpoints, runs the browser ceremony
  (`navigator.credentials.create()` / `.get()`, or the
  [`@simplewebauthn/browser`](https://simplewebauthn.dev) helper), and posts the
  resulting attestation or assertion back to the matching `verify` endpoint. Set
  the relying party (`rpId` and origin) to your own domain. The Orbit dashboard
  covers OTP send/check, profiles, and analytics — it does not enroll or revoke
  passkeys on a user's behalf. Retire a lost or rotated key from your app with
  `POST /verify/passkey/factors/{factorId}/revoke`.
</Note>