Sign in securely on Canadian Tire and across our family of companies using a passkey. |
Great customer service is important for us. If you don't find what you need in our FAQ, please contact us - we're more than happy to help.
A password is a string of characters that you manually create, in order to verify your identity when you sign into an account or service. But a password is less secure than a passkey because it can be easily compromised if it’s not strong.
A passkey is safer to use than a password because it uses a pair of automatically-generated cryptographic keys on your device: one public key for encryption (which is shared with the server), and a private key for decryption (which remains securely stored on your device). It also uses a biometric input (such as your face, fingerprint, PIN, or swipe pattern), to securely access your account – instead of a less-secure password input (which is vulnerable to a variety of password hacks).
Whenever you sign in to a website or app that supports passkeys, you’ll be prompted to use the passkey option. From there, you simply use your face, fingerprint, PIN, or swipe pattern to access your account.
Passkey storage is device-specific, which means your passkeys are either stored on your computer and/or your phone. Here’s a breakdown of where they’re typically stored:
· Android: Stored in Google Password Manager
· Windows: Stored locally on the device using Windows Hello (which uses biometrics and a PIN)
· iOS/iPadOS: Stored in iCloud Keychain or the Password app
· macOS: Stored in your Chrome profile or iCloud Keychain
Yes, you can use passkeys across different devices.
Some third-party password managers, as well as cloud services like iCloud Keychain and Google Password Manager, will automatically sync your passkeys across your devices.
For devices that don’t automatically sync passkeys, you can use a method called Cross-Device Authentication (CDA), which includes two options:
· Generating a QR code on one device and scanning it with another device to use the same passkey
· Using Bluetooth to securely transfer passkeys between devices
Yes, you can still use a password to access your Triangle account. Just remember to always use a strong password for maximum security.
Yes, passkeys are kept safe from hackers because they use a pair of automatically-generated cryptographic keys on your device. They also use a secure biometric input (such as your face, fingerprint, PIN, or swipe pattern) instead of a less-secure password input (which is more vulnerable to a variety of password hacks).
The biometric input helps make passkeys resistant to phishing, by preventing hackers from tricking you into entering your credentials on a fake website.