A passkey replaces the password you type with a sign-in you confirm on your own device. The steps below come from Google's, Microsoft's and Apple's own help pages, checked on October 29, 2026. Menus change, so if a button looks different on your screen, use the account's security settings page.
What you need to know in 10 seconds
- What it is: a passkey is a sign-in tied to your device, unlocked with your face, fingerprint or PIN
- Why it is safer: it only works on the real website it was made for, so a look-alike fake site cannot get it
- It does not replace recovery: keep your recovery options, and make a spare passkey on a second device
- Do not delete your password until you have tested the passkey
What Is a Passkey?
When you create a passkey, your device makes two keys. A private key stays on your device. A public key is saved with the website or app. To sign in, your device proves it holds the private key, and you unlock it with your face, fingerprint or PIN.
Microsoft explains that each passkey is tied to the website it was created for, so a passkey made for one site works only there. That is why passkeys are described as resistant to phishing. Your fingerprint or face data stays on your device and is not shared with the account provider.
Before You Start
- Turn on a screen lock (PIN, pattern, fingerprint or face) on your phone or computer
- Update your device and browser. Google lists Windows 10 or later, macOS Ventura or later, ChromeOS 109 or later, Android 9 or later and iOS 16 or later, with Chrome 109, Safari 16, Edge 109 or Firefox 122 or later
- Use your own device. Google warns that anyone who can unlock a device with your passkey could get into your account
- Keep your recovery options (phone number, recovery email) up to date
- Plan a spare. Create a passkey on a second device, or save it in a password manager that syncs
Set Up a Passkey on Your Google Account
- On your phone or computer, open myaccount.google.com/signinoptions/passkeys
- Choose Create a passkey
- Unlock your device with your fingerprint, face or screen lock when asked
- To use your phone's passkey on a computer, choose Try another way at sign-in, scan the QR code with your phone and approve on the phone. Turn on Bluetooth for this
Good to know about Google passkeys
Adding a passkey does not remove your password or recovery methods. With 2-Step Verification on, a passkey skips the second step because it already proves you own the device. Google says a new passkey may take up to 7 days to work at sign-in. If your account belongs to a company or school, the admin may block passkey sign-in.
Remove a Google passkey: go to your Google Account security settings, open Passkeys and security keys, select the passkey and remove it. If you lost a device, sign in from another one and remove its passkey.
Set Up a Passkey on Your Microsoft Account
- Sign in at account.live.com/proofs/manage on the device where you want the passkey
- Choose Add a new way to sign in or verify
- Select Face, Fingerprint, PIN, or Security Key
- Follow the prompts, then choose where to save it
- Finish with your face, fingerprint or PIN
Microsoft lists these places to save a passkey:
- A password manager, such as Microsoft Password Manager, Google Password Manager, iCloud Keychain or 1Password
- Your phone or tablet, by scanning a QR code with the camera or Microsoft Authenticator
- A physical security key
- Windows Hello, saved only on that Windows device
Device-bound or synced?
A device-bound passkey stays on one device. If you lose that device and have no other way in, you lose the passkey. A synced passkey is saved in a password manager or cloud service, so you can use it on your other devices. Microsoft suggests making passkeys on your other devices as a "digital spare key".
Set Up a Passkey on Your Apple Account and Apple Devices
Apple stores passkeys in iCloud Keychain and the Passwords app, and syncs them across your Apple devices. Apple says this sync is end-to-end encrypted, and signing in on a new device requires your Apple Account password and a six-digit verification code.
- Update your devices. The Passwords app works with iOS 18, iPadOS 18, macOS Sequoia and visionOS 2 or later
- Make sure passwords and passkeys sync with iCloud on your devices
- When a website or app offers to create a passkey, choose it and approve with Face ID or Touch ID
- Next time you sign in, pick the saved passkey and approve with Face ID or Touch ID
- Open the Passwords app any time to see your saved passkeys
Apple also describes recovery options if you lose all your devices: keychain escrow recovery, which needs your iCloud account password, a text message response and a device passcode, and an optional account recovery contact. Set these up before you need them.
If You Lose Your Phone or Computer
- Synced passkeys (iCloud Keychain, Google or Microsoft password managers) can be used on your other devices
- Device-bound passkeys only work on the original device, so use your spare passkey or another recovery method
- Remove the lost device's passkey from each account's security settings
- Change the screen lock and use "find my device" tools if you have them
Common Problems
- No passkey option: update the device and browser, and check that a screen lock is on
- Work or school account: your admin may block passkey-only sign-in
- QR code sign-in does not work: turn Bluetooth on for both devices
- Passkey still asked after removing it: check your password manager and delete it there too
- Not sure it works: test it by signing out and signing in again before you change anything else
Is It Safe to Stop Using Passwords?
Passkeys are designed to resist phishing, and they are tied to a device you unlock with your face, fingerprint or PIN. That makes them a strong choice for your main accounts. Still, keep your recovery methods up to date, keep a spare passkey, and only create passkeys on devices you own.
Frequently Asked Questions
What is a passkey?
A passkey is a sign-in method that replaces a typed password. Your device keeps a private key, the website keeps a public key, and you unlock the passkey with your face, fingerprint or PIN.
Are passkeys safer than passwords?
They are designed to resist phishing, because each passkey only works on the website it was created for. Microsoft and Apple both describe passkeys as phishing resistant.
What happens if I lose my phone?
A synced passkey can be used from your other devices. A device-bound passkey works only on the original device, so keep a spare passkey and recovery methods ready, and remove the lost device's passkey from your account.
