What is Obelisk?
Obelisk is a passkey-first identity and security plane. It's your one secure login across every product that uses it — no passwords, phishing-resistant by design, with a tamper-evident audit of every sign-in. For businesses, it also measures and raises your security posture (the Obelisk Rating).
How do I create an account?
Choose "Create your passkey" on the sign-in screen. Your device (Face ID, Windows Hello, a security key, or your phone) creates a private key that never leaves it. There's nothing to remember and nothing to leak.
What does “one login, everywhere” mean?
Obelisk is a single identity plane. The same account signs you in to every product built on it — one identity, no separate password per site.
What is a passkey?
A passkey is a modern replacement for a password. It's a cryptographic key stored on your device and unlocked with your face, fingerprint, or PIN. It can't be phished, guessed, or leaked in a database breach, because the secret half never leaves your device.
Do I still need a password?
No. Obelisk is passkey-first. A magic link to your email is available as a backup, and recovery codes get you back in if you lose your device — but there's no password to manage.
How does one-tap sign-in work?
If you've signed in on a device before, Obelisk recognizes your passkey and signs you in with a single tap — no typing a username first.
Should I add a second passkey?
Yes — we strongly recommend it. A second passkey (for example on your iPhone and your laptop) means losing one device never locks you out. Add one from your account page any time you're signed in.
How do I add Face ID on my iPhone?
Sign in to obeliskgate.com on your iPhone in Safari — one-tap if you've signed in before on another device, or use a magic link or recovery code if this is your first time on iPhone. Once signed in, go to Account → Add passkey. iOS will offer to save a Face ID passkey. Confirm with Face ID and you're done — next time you open the site on this iPhone, one tap signs you in instantly with Face ID.
If you've never signed in before and have no other passkey, use the magic link option: enter your email on the sign-in screen, tap the link on your iPhone, and then add the Face ID passkey from your account.
How do I sign in on a new device?
On a new device, tap "Different account?" to enter your username, then choose to sign in via magic link or recovery code. Once in, add a passkey for that device immediately — next time will be one tap.
I lost my device — what now?
Sign in with a recovery code or a magic link, then register a fresh passkey on your new device. If you had a second passkey, just use it. This is exactly why a second passkey is worth setting up early.
What are recovery codes?
One-time backup codes shown once when you set them up. Store them in a password manager or print them. Any one of them gets you back in if you lose your devices; using one rotates the rest.
A passkey isn't working
Make sure you're using the device that created it, and that your browser/OS is up to date. If a passkey was lost with a device, remove it from your account and add a new one. Still stuck? Use a magic link or recovery code to get in, then re-register.
Can I add extra verification?
Yes. You can enable an authenticator-app code (TOTP) for high-risk actions. Obelisk's setup is safe by design: a half-finished TOTP setup can never lock you out of normal sign-in.
What data does Obelisk store?
The minimum to run secure identity: your account identifier, your registered passkeys' public keys (never the private keys), and a tamper-evident log of auth events. Relying-party apps store their own data in their own databases — Obelisk doesn't hold your app data. See Privacy.
What is the Obelisk Rating?
A single 0–100 score summarizing security posture, distilled from 1,000+ live signal points — with a confidence weight and a trend. Your logo even renders it: the ring's hue is your band and its lit segments are your coverage. More on the Rating.
How do organizations work?
Register an organization to get its own Obelisk Rating, invite a team under one roof, and manage members. Businesses can also scan a website to measure its posture. See plans.
How do I invite my team?
From your organization, send role-scoped invite links. Invites expire and are capped for safety. Members join with their own passkey-first Obelisk account — no shared passwords.
What's the organization Rating + website scan?
Your organization gets its own Rating, and you can run an external scan of a website (TLS, headers, and more) that rolls into a score with concrete levers to improve it.