Amazon Seller Central Rolls Out Passkey Verification for Password-Free Sign-In
From December 2 2025 Amazon Seller Central will eliminate passwords and SMS two‑step codes, replacing them with device‑based passkeys. Sellers will log in using a fingerprint, facial scan or device PIN, with a private key stored only on the device and optional cloud sync for multiple devices.
Overview
Amazon will begin rolling out a password‑free sign‑in option for Seller Central accounts on December 2 2025. The new method relies on device‑based passkeys that use biometrics or a PIN, eliminating traditional passwords and the associated two‑step codes. Sellers should care because the change promises stronger protection against account hijacking, a persistent threat in the marketplace.
Key Points
- Password elimination — Users will log in with a fingerprint, facial scan, or device PIN instead of typing a password.
- Two‑step codes removed — The system discards SMS or authenticator‑app tokens, streamlining the login flow.
- Device‑stored cryptography — A public‑private key pair lives only on the seller’s device and never travels to Amazon’s servers.
- Broad device support — Major browsers and operating systems from Apple, Google, and Microsoft recognize passkeys, so most smartphones, tablets, and PCs are ready out of the box.
- Individual device registration — Each device used to manage the seller account must be enrolled separately, ending the practice of shared login credentials.
How Passkey Verification Works
- Device enrollment — When a seller opts in, the Seller Central security page prompts the user to register the current device; the device creates a unique cryptographic key pair and stores the private key locally. For example, a seller using an iPhone will see a “Add Passkey” button that triggers the iOS passkey creation flow.
- Biometric or PIN confirmation — At every subsequent login, the device asks the seller to verify identity via a built‑in biometric sensor or a PIN. A seller on a Windows laptop might place a finger on the fingerprint reader, while a seller on an Android tablet could use facial recognition.
- Secure challenge‑response — After the biometric check, the device signs a one‑time challenge from Amazon with the private key and sends the signed response back. Amazon validates the signature using the stored public key, granting access without ever seeing a password.
Analysis & Recommendations
Why This Matters
Passkey authentication removes the weak password/SMS combo that attackers often exploit, reducing account hijacking risk. Because the private key never leaves the device, a stolen phone without the correct biometric data cannot be used to sign in. Sellers must enroll each device to maintain uninterrupted access.
Key Takeaways
- Rollout begins on December 2 2025, removing passwords and six‑digit SMS codes.
- Login relies on a public‑private key pair generated on the device; the private key never reaches Amazon servers.
- Enrollment is under three minutes via Settings → Login & Security → Add Passkey.
- Each device (desktop, laptop, mobile) must be registered separately; team members need individual passkeys.
Recommended Actions
- →In Seller Central go to Settings → Login & Security and click “Add Passkey” to enroll your primary device today.
- →Repeat the Add Passkey flow on every computer and mobile device you use to avoid lockouts.
- →Update your account email and phone under Settings, then monitor the “Recent Logins” page for unknown devices.
Comments
Join the discussion
Log in or create an account to share your thoughts on this update.
No comments yet. Be the first to share your thoughts!