«This operation requires a passkey with local verification.» (strong_authentication_required)

Symptom

When you try to administer or sign in to an application, «This operation requires a passkey with local verification. Sign in with your passkey.» or «This access requires a passkey with local verification. End the session and sign in with a passkey.» appears. The API answers 403 strong_authentication_required.

Cause

The current session was opened with a lower-assurance method: password only, password and one-time code, or a recovery code. Those sessions only let you manage your own account in the «Protect» area.

Fix

1. Choose «Sign out».
2. Sign in again with «Sign in with a passkey (this device)», or with your password followed by phone approval.
3. Repeat the operation.

If you signed in with a password and code and have an approver phone, use the «Confirm this sign-in on your phone» card › «Approve on phone» to get a full session without signing out.

I have no passkey

Create one under «Protect» › «Trusted devices» › «Create passkey» (the console asks for a confirmation with the factor you already have) or link an approver phone.

When to escalate

If you signed in with a passkey and the message persists, the passkey may lack local verification (a security key without a PIN). Use another passkey or contact support.