In one implementation, a server receives a request from a client device to access a user account of a user, wherein the user account provides access to one or more credentials associated with the user. The server determines that the client device is not associated with the user account and transmits a message to the client device prompting the user to provide a biometric identification of the user. The server then receives data representing the biometric identification of the user from the client device. Next, the server determines that the data representing the biometric identification of the user matches a biometric profile of the user associated with the user account. Finally, in response to determining that the data representing the biometric identification of the user matches a biometric profile of the user associated with the user account, the server associates the client device with the user account, such that the user is enabled to access the user account, and the associated one or more credentials, from the client device.