Registered Devices

+ Add Device

MacBook Touch ID

Added 2026-04-12 · Sign count: 47

id: AQID...passkey-id-ma…

YubiKey 5C NFC (backup)

Added 2026-04-12 · Sign count: 3

id: BgQID...passkey-id-y…

🔐 Why passkeys only?

No passwords. Nothing to phish, nothing to leak in a breach, nothing to forget.

No shared secrets on the wire. WebAuthn uses public-key cryptography — the private key never leaves your device.

Phishing-resistant. A passkey registered for hozo.tailnet.ts.net will refuse to sign for any other origin. A look-alike domain cannot impersonate Hōzō to you.

Recovery tip: Always keep at least 2 registered devices (e.g. laptop + YubiKey) so you can recover if one is lost. If you remove all devices, Hōzō enters bootstrap mode and anyone on the network can register a new device.