Veb
Veb Manual
/
/
All topics

Passwords and Autofill

Passkeys and one-time codes

Reference archive: this page documents the original Yab browser. Features, platforms and release dates here do not describe the current Veb prototype. Veb release plans →

Keep your two-step codes beside the password, and fill the ones sites send you. Passkeys come with an update.

⌥⌘L

Passkeys#

Passkeys are off for now: they wait on Apple’s passkey permission for browsers, and an update turns them on. Then, when a site offers a passkey, the Mac’s own sheet asks how: Touch ID, iCloud Keychain or a password app, an iPhone nearby, or a security key. macOS asks once whether Veb may use passkeys. Passkeys only work on secure pages.

One-time codes#

Veb can be the authenticator for a site, so its six-digit code sits beside the password.

  1. On the site, start setting up two-step sign-in with an authenticator app, and copy the setup key.
  2. Press ⌥⌘L, pick the account, press ⌘K and choose Add One-Time Code….
  3. Paste the key, or the otpauth:// link. Veb shows the code: type it on the site to finish.

From then on, ⌥⌘C on the account in ⌥⌘L copies the code, and when the site asks for it, the code hangs under its box and ↩ puts it in. The key stays in the keychain; only the code ever reaches the page.

Codes from your mail and Messages#

When a site asks for a code it just mailed or texted you, the code hangs under the box with who sent it, and ↩ puts it in. A code is never filled without you. Settings › Autofill has, under One-time codes:

  • From your mail: through Mail once it’s on, and before that, if you turn it on, from Gmail’s unread mail with the tab’s own sign-in.
  • From Messages: the codes you’re texted. It needs Full Disk Access for Veb, and the row offers Allow… for it.
  • Archive code mails after use, with Mail on.

Some sites sign you in with a link they mail you. When fresh unread mail from the site you’re on brings one, the corner says Sign in to … with the site’s name, and Open follows the link in that tab. It needs Mail connected and From your mail on. The link is never opened before you press Open.