Skip to main content

What are Passkeys, Magic Auth and TOTP — and which one should I choose?

Dockwa supports three modern ways to protect your account:

Method

What it is

Best for

Passkey

Sign in with Face ID, Touch ID, or your device screen lock — no password to remember or steal. Phishing-resistant.

Most people. Fastest and most secure.

Authenticator app (TOTP)

A 6-digit code from an app like 1Password, Google Authenticator, or Microsoft Authenticator that refreshes every 30 seconds.

Anyone who already uses an authenticator app, or teams with security policies.

Magic Auth (email codes)

A 6-digit code sent to your email inbox.

A lightweight option when you don't have your usual device handy.

Our recommendation: set up a Passkey. It's faster than typing a password and far more secure. Why no text messages? SMS codes are the easiest second factor for attackers to intercept, so we deliberately don't offer them.

Did this answer your question?