Authorization FAQ

New devices authenticating with either a FIDO token or Passkey which is shared with an existing, unblocked device are not blocked. These superior authentication methods allow users to bypass blocking completely!

No, the anchor device designation is dynamic and is based on consistent usage among other factors. The criteria is also dynamic as we work to enhance security over time.

It is possible for end users to have more than one anchor device. However, if they don’t have access to any anchor devices, they will need to contact your financial institution to become unblocked.

Accountholders clearing cookies or browsing privately on all devices do not have anchor devices. By using these methods, they remove key indicators we use to track usage and determine trustworthiness.

No, devices which have been removed by an accountholder or financial institution employee cannot become anchor devices, nor will they be automatically unblocked by the waitlist setting. The “Restricted” status will appear in the device list for such devices. For more details, see our full documentation