Amazon Seller Central Passkey Requirement: What Sellers Must Do

Amazon is requiring all Seller Central sellers to adopt passkey authentication by September 29, 2026. Passwords will remain available only for account recovery purposes.

Sellers must set up passkeys immediately through their account settings to avoid being locked out of their accounts after the deadline.

Key Takeaways: Amazon's Passkey Mandate

• Hard deadline: September 29, 2026 is when password-based logins end for Seller Central (except recovery)

• Action required: All sellers must proactively set up passkeys in their account settings before the cutoff

• Device-specific: You'll need a passkey configured on every device you use to access your seller account

• No exceptions: This applies to all seller accounts regardless of size, volume, or account age

• Security upgrade: Passkeys eliminate phishing risks and credential theft that plague password-based systems

What the Amazon Seller Central Passkey Requirement Means

Amazon's mandatory passkey rollout represents the most significant authentication change for sellers since two-factor authentication became standard. Starting September 29, 2026, traditional password entry will no longer function as a login method for Seller Central accounts.

This is not optional. Unlike previous security enhancements that Amazon encouraged or gradually enforced, the passkey requirement has a hard deadline with no grace period announced.

Sellers who haven't configured passkeys by late September risk immediate loss of account access during the critical Q4 selling season. Passwords will still exist in your account profile, but their function becomes strictly limited to account recovery scenarios—forgotten passkeys, lost devices, or emergency access situations.

73% of data breaches involve stolen or weak passwords, making them the primary attack vector for account takeovers in e-commerce.

Understanding Passkeys: How They Replace Passwords

Passkeys are cryptographic credentials tied to your physical device rather than something you memorize. When you set up a passkey, your device generates a unique key pair: a public key stored on Amazon's servers and a private key that never leaves your device.

During login, Amazon's system challenges your device to prove it holds the private key. You authenticate by confirming your identity through biometrics (fingerprint, facial recognition) or your device PIN.

No password travels across the internet. No credential can be intercepted mid-transmission. No database breach exposes your login secret.

Passkeys vs. Passwords: Technical Comparison

The FIDO Alliance, which developed the passkey standard, designed this approach specifically to eliminate the entire category of credential-based attacks that have plagued online commerce for decades.

How to Set Up Your Seller Central Passkey Before September 29

Step 1: Navigate to account settings. Log into Seller Central using your current credentials, then access your account settings from the main menu. Look for the "Login Settings" or "Security" section where authentication methods are managed.

[[TQ_IMG:https://framerusercontent.com/images/3Ktag7bzsIXHHYUEgwRn5x9hbc.png|Understanding Passkeys: How They Replace Passwords]]

Step 2: Select "Add a passkey." Amazon's interface will present an option to create a new passkey. Click this button to begin the registration process.

Step 3: Authenticate with biometrics or PIN. Follow your device's prompts to scan your fingerprint, use facial recognition, or enter your device PIN. This step creates the cryptographic key pair and associates it with your Seller Central account.

Step 4: Name your passkey. Give your passkey a recognizable name like "iPhone 15" or "MacBook Pro Office" so you can identify which device it corresponds to if you need to manage multiple passkeys later.

Step 5: Test immediately. Log out and attempt to log back in using the passkey to verify it works before the deadline. This catches any setup issues while you still have password fallback available.

Set up passkeys on every device you use regularly—laptop, tablet, phone. Each requires its own passkey registration.

Device Compatibility Considerations

Passkeys work on most modern devices and browsers, but older hardware may face limitations. Windows 10 and later with Windows Hello, macOS Ventura and later with Touch ID or Face ID, iOS 16+ and Android 9+ all support passkeys natively.

If you're using older devices to access Seller Central, now is the time to plan upgrades or ensure you have at least one compatible device configured before the September 29 cutoff.

What If You Miss the Deadline or Lose Your Device?

Missing the Deadline

Missing the deadline doesn't permanently lock you out, but it forces you into the account recovery flow. You'll need to use your password (which still exists for recovery), verify your identity through additional steps Amazon requires, and then immediately set up a passkey before accessing your account.

This recovery process can take hours or days depending on Amazon's verification requirements—time you cannot afford during a product launch or Prime Day. The risk isn't permanent loss; it's operational disruption at critical moments.

Lost or Broken Device Scenarios

Lost or broken device scenarios require similar recovery steps. If your passkey device is stolen, damaged, or replaced, you'll use your password to regain access, then set up a new passkey on your new device.

This is precisely why Amazon isn't eliminating passwords entirely—they remain the ultimate fallback mechanism.

Best Practices for Passkey Management

• Register multiple devices: Set up passkeys on at least two devices you regularly use to create redundancy

• Document your passkey devices: Keep a secure record of which devices have passkeys registered

• Use a password manager with passkey support: Services like 1Password, Bitwarden, and Dashlane now support passkey sync across devices

• Maintain your recovery password securely: Store your Seller Central password in a secure location for emergency recovery

• Update when you replace devices: Remember to set up a passkey on new devices and remove old ones from your account

Why Amazon Is Mandating This Change Now

Amazon's timing reflects escalating credential-based attacks targeting high-value seller accounts. Seller Central accounts represent direct access to business bank accounts, inventory systems, customer data, and the ability to modify pricing or listings—making them premium targets for sophisticated fraud operations.

The company has likely observed attack patterns that justify forcing this transition despite the operational burden on sellers. Password breaches, phishing campaigns mimicking Seller Central login pages, and credential stuffing attacks (using passwords leaked from other sites) have all increased in frequency and sophistication.

For Amazon, eliminating password-based authentication removes an entire attack surface. For sellers, it means one less security vulnerability to worry about—but only if you complete the setup before the deadline.

By 2027, passkeys are projected to reduce account takeover fraud by more than 90% across platforms that implement them.

How TrackIQ Adapts to Seller Central's Passkey Requirement

TrackIQ is designed to work seamlessly with Amazon's authentication systems, including the new passkey requirement. Because TrackIQ operates as an MCP (Model Context Protocol) server that connects AI assistants directly to your live Amazon data, it respects whatever authentication method Seller Central requires.

[[TQ_IMG:https://framerusercontent.com/images/qy5hrPRZfiWIAqRgs7k5DmK9rCE.png|What If You Miss the Deadline or Lose Your Device?]]

When you authenticate TrackIQ's connection to your Seller Central account, you'll use the same passkey-based login flow Amazon mandates. This ensures TrackIQ maintains secure, authorized access to your ads and seller data without requiring you to manage separate credentials or authentication systems.

Timeline and Enforcement: What Happens After September 29

Amazon has not announced a phased rollout or exceptions to the September 29, 2026 deadline. Based on previous mandatory security updates, enforcement will likely be immediate and universal across all marketplaces and account types.

Expected Enforcement Phases

Sellers should expect dashboard banners, email notifications, and possibly in-app prompts reminding them to set up passkeys as the deadline approaches. Amazon typically intensifies these warnings in the final weeks before mandatory changes take effect.

Common Questions About Multi-User and Agency Access

Agency Account Management

For agencies managing multiple client accounts, each user who accesses Seller Central will need their own passkey on their devices. Passkeys are inherently individual—they cannot be shared like passwords once were (which was always against Amazon's terms of service).

This actually improves security for agency relationships by ensuring each team member authenticates with their own device-specific credential. If an employee leaves or a contractor relationship ends, you revoke that user's access without affecting anyone else's authentication.

Multi-Person Seller Operations

For sellers with multiple team members, each person needs to set up their own passkey on devices they personally control. The Seller Central user permissions system remains unchanged—passkeys simply replace how each authorized user proves their identity during login.

Preparing Your Team and Operations

If you run a multi-person operation, schedule time now to ensure every team member who accesses Seller Central completes passkey setup on their primary devices. Don't assume your team will handle this independently—treat it like mandatory compliance training with verification that each person has completed the setup.

For remote teams or contractors, confirm they have compatible devices before the deadline. If someone primarily uses an older tablet or computer that doesn't support passkeys, they'll need to upgrade their hardware or adjust how they access your account.

Documentation is critical. Update your internal procedures to reflect passkey authentication. Include device-specific instructions for the hardware your team uses (iPhone steps differ slightly from Android, Windows Hello differs from macOS Touch ID).

The Broader Shift Toward Passwordless E-Commerce

Amazon's passkey mandate reflects a broader industry movement toward passwordless authentication. Major platforms including Google, Microsoft, and Apple have all implemented passkey support in the past two years, and many are moving toward making it mandatory for high-value accounts.

For sellers, this means the skills and habits you develop managing Seller Central passkeys will transfer to other platforms you use. The learning curve is minimal—most users find passkeys simpler than passwords once they're set up—but the security benefits are substantial.

Expect other e-commerce and advertising platforms to follow Amazon's lead. Shopify, eBay, Walmart Marketplace, and major ad networks will likely mandate similar transitions as the underlying technology matures and becomes universal across devices.

[[TQ_SOURCES]]Amazon Starts Requiring Seller Central Passkeys in Late September - EcomCrew | https://www.ecomcrew.com/amazon-starts-requiring-seller-central-passkeys-in-late-september/; Amazon Seller Central | https://sellercentral.amazon.com; Passkeys: What They Are and How They Work - FIDO Alliance | https://fidoalliance.org; Amazon Account Security - Amazon Customer Service | https://www.amazon.com/gp/help/customer/