What is a passkey? Signing in without a password
In short
- A passkey lets you sign in with the same fingerprint, face, PIN or pattern you already use to open your phone.
- The FIDO Alliance, which sets the standard, says passkeys are always strong and resistant to phishing.
- Your passkeys live in a password manager, so protect that account and keep its recovery options.
Passkeys replace passwords with something you already do many times a day: opening your phone.
How they work
When you create a passkey, your device makes a pair of keys. The site keeps only the public key; the private key stays with you. To sign in, your device proves it holds the private key once you’ve confirmed it’s you with your fingerprint, face, PIN or pattern.
Why they’re safer
The FIDO Alliance says passkeys are always strong and resistant to phishing. There’s no password to steal, guess or type into a fake site, and no code to read out to a scammer.
Where they’re kept
- Apple devices: iCloud Keychain.
- Google: Google Password Manager. Create one for your Google Account at g.co/passkeys.
- Windows: Windows Hello.
- Password managers such as 1Password and Bitwarden can keep them across devices.
Keep a way back in
Passkeys are only as safe as the account that stores them. Protect your Apple, Google or Microsoft account, keep its recovery options, and save backup codes where a service offers them.
Passkeys and one-time numbers
Signed up somewhere with a one-time number from ReserveSMS? A passkey gives you a way to sign in that doesn’t depend on that number, which receives codes for 20 minutes only. Add one wherever the app offers it.
Common questions
What is a passkey?
A way to sign in without a password: your device confirms it’s you with your fingerprint, face, PIN or pattern.
Are passkeys safer than passwords?
The FIDO Alliance says passkeys are always strong and resistant to phishing, as there’s no password to steal or type into a fake site.
Where are passkeys stored?
In a password manager, such as iCloud Keychain, Google Password Manager, Windows Hello, 1Password or Bitwarden.