In short
Every site you have enrolled with through LinxyPass appears in the Linxy App as a Brand card. Tap Sign in on that card, confirm with your face or fingerprint, and the site opens in your browser already signed in. You do not go to the site first, find its login, and scan anything — the App starts the sign-in, and the site receives it.
The part that surprises people is the first time in each browser: the site pauses on a page that says you are verified and asks whether to open your account. That page is not doubting you. It is making sure the browser it landed in is yours, because the App proved who asked for the sign-in, not whose screen the result arrived on. Answer it once and that browser never asks again for you.
Two directions of sign-in
The sign-in described in Signing in with LinxyPass starts on the site: the site shows its Mark, you scan it with the App, you approve on your phone. The site asked and your phone answered.
One-Tap runs the other way. You are in the App, you tap the site you want, your phone proves it is you, and the site is told to let you in. Nothing on the site had to be found or scanned. This is possible only because, at enrollment, your device and that site were bound to each other — the App is not guessing which account you mean; it is using the binding that already exists.
One-Tap is a phone motion: the site opens in your phone’s browser. To sign in on a computer, start from the computer’s sign-in page and scan its Mark with the App, as described in Signing in with LinxyPass.
Where Sign in appears
Sign in is the right-hand, solid segment of the bar at the bottom of a Brand’s Connection card. It is drawn only on Brands you can sign in to — a Brand that has no site behind it, or a person, does not get one. The bar carries only the paths that exist for that card:
| Segment | What it does | When it is present |
|---|---|---|
| Connect | Opens the conversation with that Brand or person | Always |
| Website | Opens the Brand’s site in your browser, not signed in | When the Brand has a site address |
| Sign in | Runs One-Tap and opens the site signed in | Brands you enrolled with through LinxyPass |
The same Brands also appear at the top of the LinxyPass screen, under Recent sign-ins, once you have signed in to them at least once (see below). Tapping a row there does exactly what Sign in on the card does.
The button always says Sign in. It does not change its wording to describe what state your device is in; if something stands in the way, you are told when you tap.
What happens when you tap it
- The Signal Ring appears. A sheet rises with the Brand’s initial inside a ring in the Brand’s color and the words Sign in to <Brand>? Approve on this device to continue. Your phone asks for your face or fingerprint.
- The ring turns green. That is your device proving its key. Behind it, the App asks Linxy for a sign-in on your behalf. Linxy checks that the site is live, that your enrollment there is intact, and that this device has not been revoked, then issues a single-use pass that lives for sixty seconds.
- Your browser opens. Always your real browser — never a window inside the App — because the site’s own sign-in has to land in the browser you actually use. The site receives the pass and exchanges it with Linxy directly; the pass itself is never shown to anything but the site.
- The site opens your account — straight away if this browser has confirmed you before, or after one question if it has not.
Cancel the face or fingerprint prompt and nothing is sent: no pass is minted, the site is never contacted, and you are simply back in the App. If the App was opened cold by a home-screen shortcut, canceling also brings up the ordinary app lock, so a canceled sign-in never leaves the App open and unlocked.
The once-per-browser check
The first time a One-Tap sign-in reaches a particular browser, the site shows a short page: You’re verified. One last check that this is your browser. Open <your name>’s account? with a button to continue and a plain link to the site’s front page if you would rather not.
This exists because of a specific trick it prevents. Your face or fingerprint proved who asked for the sign-in. It proved nothing about whose screen the result opened on. Without the check, someone could mint a sign-in to their account on their own phone, get you to open the resulting link, and quietly leave your browser inside their account — where whatever you did next would be theirs. Asking “open this person’s account?” with the name in it defeats that, because you would notice the name is not yours.
After you confirm once, that browser remembers that it has vouched for you, and later One-Tap sign-ins for you go straight through. Any earlier LinxyPass sign-in in that browser — including the enrollment that created your account there — already counts, which is why for most people the very first One-Tap is tap-free too. The memory is per identity: a link minted for somebody else still meets the check, which is exactly when it matters.
| You see | It means | Do |
|---|---|---|
| Your account opens directly | This browser has confirmed you before | Nothing |
| “Open <your name>’s account?” | First One-Tap in this browser | Confirm. You will not be asked again here |
| “Open <someone else’s name>’s account?” | The link was not minted by you | Do not confirm. Use the link to the front page instead |
| “Sign-in expired” | More than a minute passed, or the pass was already used | Tap Sign in again in the App |
| “No matching account” | The site has no account for your LinxyPass identity | Contact the site owner; enroll again if invited |
Recent sign-ins
The LinxyPass screen keeps a shelf of the last three Brands you signed in to, most recent first, above the scan controls. It is drawn only when there is something on it, and it is stored on this phone only — sign in to a site on your other phone and it will not appear on this one. A switch on My Sites, Show recent sign-ins, hides the shelf; it stays on by default because an empty shelf is never shown anyway.
Signing in from the shelf and signing in from the Connection card are the same ceremony. The shelf is a shortcut to the cards you use, not a separate list of sites.
If biometric verification is paused
The Enable Biometric switch under Settings pauses biometric sign-in on this handset without ending anything (see Devices and settings). One-Tap is the exception that lifts the pause on its own: tapping Sign in still runs the Signal Ring, and a successful one turns the switch back on for you. If the phone has no usable key at all — it was revoked from another device, or has never been enrolled — the ceremony fails and tells you sign-in is unavailable.
Symptoms, causes and fixes
| Symptom | Cause | Fix |
|---|---|---|
| No Sign in segment on a card | That Brand is not a site you enrolled with through LinxyPass, or it is a person | Enroll on the site first; the segment appears once the binding exists |
| The site says the sign-in expired | The pass lives sixty seconds and was not used in time, or was used already | Tap Sign in again |
| The site asks “open <name>’s account?” every time | The browser is discarding cookies — private mode, or a cleaner | Use a normal window, or accept the one extra tap |
| “Sign-in unavailable” in the App | This device has no live key for the sign-in, or the Brand’s site is disabled | Check Manage Devices; if this device was revoked, sign in to the App normally once to bind it again |
| The site opened but not signed in | Website was tapped rather than Sign in — Website only opens the site | Tap the solid Sign in segment |
| Nothing on the LinxyPass screen under Recent sign-ins | No sign-in has happened from this phone yet, or the shelf is switched off | Sign in once from a card; check the Show recent sign-ins switch on My Sites |