# X_PASSKEY_STEP_UP_REQUIRED

## Means

a sensitive action ran without a fresh user-verified passkey proof for its digest

## Typical cause

the call carried no assertion, or the assertion approved other bytes than the ones this call would act on

## Fix

`x errors explain X_PASSKEY_STEP_UP_REQUIRED --json, then fetch stepUp.options({ userId, input }), run getPasskey(options) in the browser and resend the call with the response`

[Auth and sessions](/error-codes#auth-and-sessions)