TLDR - too long didn’t read/aka summary
Truple’s end-to-end encryption now works with passkeys.
- No passcode to remember. Unlock your encrypted screenshots with your fingerprint, your face, or the PIN you already use to unlock your device.
- Nothing to share. Everyone who views a report uses their own passkey. No more passing a passcode around.
- More secure. There’s no shared secret to guess, leak, or lose.
- Easy to turn on. Go to your Account page and click Set up a passkey.
The E2EE passcode you’ve been using is now called Legacy E2EE. It keeps working while you make the switch.
What is a passkey?
A passkey is a modern replacement for passwords and passcodes. Instead of typing something you have to remember, you prove it’s you the same way you unlock your phone or computer:
- your fingerprint,
- your face (Face ID, Windows Hello, and similar), or
- your device unlock code (PIN or pattern).
Your fingerprint and face never leave your device. They simply tell your device it’s okay to unlock your encrypted data.
Why we’re replacing the E2EE passcode
When we launched end-to-end encryption, it relied on a single passcode. It worked like a Wi-Fi password: you made one up, wrote it down, and shared it with everyone who views your reports. That kept your screenshots private, but it had real drawbacks:
- People forgot it, and a forgotten passcode meant losing access to encrypted data for good.
- It had to be shared, often by text or email, with every report recipient.
- One passcode protected everything.
Passkeys fix all three.
More secure
- Nothing to guess or steal. A passkey can’t be written on a sticky note, reused from another site, or typed into a fake login page.
- Nothing shared. Each person has their own passkey on their own device, so there’s no single secret floating around in text messages.
- Still end-to-end encrypted. Only you and the people you send reports to can see your screenshots. No one at Truple can.
More user friendly
- Nothing to memorize or write down. Unlocking takes a touch or a glance.
- Report recipients don’t need anything from you. They set up their own passkey the first time they open your report.
- Forgiving if something goes wrong. Lose a device? Use a passkey on another device, or your backup code. And if every option is lost, you can reset encryption from your Account page and keep going.
How to turn on passkeys
- Sign in at app.truple.io on a phone or computer that has a screen lock, using Chrome, Edge, or Safari.
- Open your Account page and find the End-to-End Encryption section.
- Click Set up a passkey.
- Confirm with your fingerprint, face, or device unlock code. Depending on your browser you may be asked twice: once to create the passkey, and once to activate it.
- That’s it. Repeat on each device you view reports from, so every one of them has its own passkey.
If your device can’t create a passkey, you’ll be given a backup code instead. Save it somewhere safe. It unlocks your encrypted data on a new device.
What happens to my existing passcode?
Nothing changes until you’re ready. Your current passcode is now labeled Legacy E2EE, and screenshots already protected by it keep working exactly as before. Adding a passkey doesn’t remove anything.
Passkeys are where end-to-end encryption is headed, so we recommend setting one up now. Keep your Truple apps up to date as well, so every device can use the new encryption.
Questions?
If you get stuck, open a support ticket and we’ll help you get set up.
Cam