Passkey

A passkey is a password replacement that lets you sign in with your fingerprint, face or screen lock, and cannot be typed into a fake website.

Passkey: A passkey is a modern way to sign in without a password. Your phone holds a secret key, and you prove it is you using your fingerprint, face or screen lock. Because the secret never leaves your device, a fake website cannot collect it from you.

Many big services now offer passkeys, including Google accounts and several shopping and payment sites. When you create one, the service stores only a public part that is useless to a thief. On a later login your phone asks you to unlock it and that is all. There is nothing to type, forget or reuse. Your phone can also sync passkeys to your Google account, so a new phone can use them after you sign in.

Passkeys beat phishing because the key works only on the real website that created it. They still depend on your phone, so keep a strong screen lock and a recovery method ready. Turn on passkeys where offered and keep a password manager for sites that do not yet support them. A passkey is also quicker than a password plus OTP, so it is both safer and easier.

Tips

• Create a passkey for your Google account when it is offered; it takes a minute.
• Keep a strong screen lock, since it protects every passkey on the phone.
• Set up account recovery so losing the phone does not lock you out.

Related terms