Passwordless Authentication with Passkeys in NetSuite 2026.2

TL;DR: As of NetSuite 2026.2, users can set up passwordless authentication using passkeys, streamlining the login process and offering enhanced security features. This allows you to log into your NetSuite account without entering a password.

What is Passwordless Authentication?

With the introduction of passwordless authentication, users can utilize passkeys as a secure alternative to traditional passwords when logging into their NetSuite accounts. Passkeys simplify the sign-in process, enhancing User Experience (UX) by eliminating the need to remember complex passwords. However, it's important to note that a password is still required for other internal actions within NetSuite.

Enhanced Security with Passkeys

In conjunction with passwordless authentication, passkeys are compliant with the FIDO2 specification, allowing them to serve as a second factor for authentication (2FA) during the login process for added security. This means users who have set up a FIDO2 compliant passkey can enhance their account security by using it as part of their two-factor authentication strategy.

• Two-Factor Authentication: For those utilizing passkeys as 2FA, it’s essential to remember that administrators have the ability to disable this feature, which would necessitate users to authenticate using an authenticator app instead.
• Regular Checks: NetSuite prompts users to enter a code from an authenticator app every three months. This ensures that all users maintain an active and functional 2FA setup for instances when passkeys cannot be utilized.

Who This Affects

The introduction of passwordless authentication with passkeys affects the following roles and modules:

• Administrators: They can enable or disable passkey authentication and manage compliance with 2FA.
• Users: All users can benefit from the passwordless login feature for a streamlined access experience.

Key Takeaways

• NetSuite 2026.2 introduces passwordless authentication using passkeys.
• Passkeys enhance security and provide a simpler login experience.
• FIDO2 compliance allows passkeys to act as a second authentication factor.
• Administrators retain control over security settings for passkeys.
• Users must periodically verify their 2FA setup to maintain access.