# X_PASSKEY_INVALID

## Means

a passkey ceremony response failed its signature, origin, rp id, flag or counter check

## Typical cause

the assertion or attestation was forged, tampered with, made for another origin or rp id, made without user verification, or came from a cloned authenticator whose signature counter went backwards

## Fix

`x errors explain X_PASSKEY_INVALID --json, then start the ceremony again: await passkeys.loginOptions()`

[Auth and sessions](/error-codes#auth-and-sessions)