Passkeys protect account access

A passkey uses public-key cryptography. The private key remains with the seller's or buyer's authenticator. Onfinga does not store passkey private keys or biometric templates.

Confirmation links have a limited purpose

A seller shares an opaque short link for a specific pending order. Replacement invalidates the previous short link. Expired or revoked confirmation requests cannot be completed through the link.

Payment remains separate

Onfinga records buyer confirmation before payment and then directs the buyer to the destination stored for that order. Onfinga does not receive the seller's payment credentials or certify that a customer payment has cleared.

Limits of the record

An Order Confirmation Record documents the confirmation event and order details captured by Onfinga. It does not guarantee identity, prevent fraud, authorize a payment card, provide legal advice, or guarantee a dispute outcome.