OXU Pass - FAQs
Last updated
Last updated
1.1 What is OXU Pass?
OXU Pass is a security app that helps you:
Sign in to your organization’s systems
Verify your identity (2FA, passkey, biometric)
Approve security requests (e.g., sign-in or sensitive actions)
Manage your account security
1.2 Do I need to create an account?
No. Your account is provided and managed by your organization.
1.3 What should I do after first sign-in?
You should:
Set up authentication methods (passkey, authenticator, etc.)
Set up recovery options (email, backup codes, etc.)
Enable app lock (Face ID / passcode)
2.1 How can I sign in?
Depending on your organization’s settings:
2.2 Why am I asked for additional verification (2FA)?
Your organization requires extra verification to protect your account.
2.3 I’m not receiving an OTP code. What should I do?
2.4 Which authentication method should I use?
3.1 What is a passkey?
A passkey allows you to sign in without a password using your device (Face ID, fingerprint, etc.).
3.2 Should I enable passkey?
Yes. It provides a faster and more secure sign-in experience.
3.3 What happens if I change my device?
Your passkey may sync across devices via Apple/Google. Otherwise, you may need to set it up again.
4.1 When do I need to verify my face?
For high-security actions, such as approving requests or accessing sensitive features.
4.2 I completed verification but can’t use it. Why?
Possible reasons:
4.3 Can I retry biometric verification?
Yes. You can repeat the verification process if needed.
5.1 Can OXU Pass replace Google Authenticator?
Yes. OXU Pass can generate OTP codes for supported services.
5.2 What happens if I lose my phone?
You may lose access to your OTP codes. Make sure you:
6.1 What is a “Sign-in request”?
It’s a request asking you to confirm a login or security action.
6.2 Should I approve every request?
No. Only approve requests if:
6.3 What if I approve the wrong request?
6.4 Why did my request expire?
Requests are time-limited for security. You’ll need to retry the action.
7.1 Can I use OXU Pass on multiple devices?
Yes, if allowed by your organization.
7.2 What does “session expired” mean?
You’ve been signed out due to your organization’s session policy.
7.3 I see an unfamiliar device. What should I do?
8.1 What does the activity log show?
8.2 I see activity I don’t recognize. What should I do?
This may indicate suspicious activity:
9.1 What security features should I enable?
9.2 What is app lock for?
It protects the OXU Pass app if someone accesses your device.
9.3 What is a security key?
A physical device used for secure authentication.
10.1 I forgot my password. What should I do?
Use “Forgot password” or contact your admin.
10.2 I lost all my authentication methods. Can I recover my account?
Yes, via:
10.3 What are backup codes?
Backup codes allow you to sign in when other methods are unavailable.
11.1 Why do other apps require OXU Pass?
Your organization integrates OXU Pass for secure authentication.
11.2 Is OXU Passs responsible for third-party apps?
No. OXU Pass only provides authentication. External apps are managed separately.
12.1 Can my organization see my activity?
Yes. OXU Pass is designed for organizational use, and admins may monitor activity.
12.2 Does OXU Pass store my biometric data?
13.1 How can I keep my account secure?
13.2 Can my account be compromised?
Yes, if:
14.1 Who should I contact for help?
Email + password
Passkey
Two-step verification (2FA)
Check your device time is correct
Make sure you’re using the correct authenticator
If the issue persists, contact your organization admin
Passkey → fastest and most secure
Authenticator → reliable fallback
Biometric → used for sensitive actions
Your biometric setup is still under review
Your organization has not approved it yet
Set up recovery options
Save backup codes
You initiated the action
The device and location look correct
Contact your admin immediately
Change your password if necessary
Change your password immediately
Contact your admin
Sign-in activity
Password changes
Approval/rejection actions
Device, IP, and location
Change your password
Notify your admin
Passkey
Authenticator
App lock
Recovery methods
Admin reset
Trusted contact
Recovery methods (if configured)
Biometric data may be temporarily stored for verification
It is then converted into a secure format for future matching
Never approve unknown requests
Never share OTP codes
Always check device and location before approving
You approve a malicious request
Your device is compromised
Your credentials are exposed
Account issues → your organization admin
App issues → OXU support (support@oxu.com)