What a passkey is and why you'd create one

A passkey is a digital credential stored on your device — your phone, computer, or security key — that unlocks your accounts without a password. Instead of typing a password, you unlock your device using your fingerprint, face recognition, or a PIN, and the passkey does the rest of the authentication work behind the scenes.

You create a passkey through an individual website or app when you're logged in. The site generates the passkey, stores half of it on their server, and the other half stays encrypted on your device. This means no password exists that someone could steal or guess. You control the passkey through your device's built-in security — if someone steals your phone, they still can't use your passkeys without unlocking the phone itself.

Passkeys work across devices if you use the same account system. If you create a passkey on your iPhone using iCloud Keychain, you can use that same passkey to sign into the account on your Mac or iPad. Android users can sync passkeys through Google Account. Windows users can use Windows Hello or Microsoft Account passkeys.

Key Takeaways

  • Passkeys are created one at a time through individual websites or apps when you're already logged in, usually found in account settings or security settings.
  • Your device's fingerprint, face recognition, or PIN is what actually unlocks the passkey — the passkey itself never appears as a code you type.
  • Passkeys sync across your devices if you use the same account system (iCloud for Apple devices, Google Account for Android, Microsoft Account for Windows).
  • You should keep at least one backup passkey or recovery method in case you lose access to your primary device.
  • Passkeys work only on websites and apps that support them; many sites still use passwords alongside passkey options.

How to create a passkey on iPhone or iPad

Open the website or app where you want to create a passkey. Go to your account settings — this is usually found under a profile icon, a gear icon, or a menu labeled "Account" or "Settings." Look for a section called "Security," "Sign-in methods," "Authentication," or "Passkeys."

Tap the option to create a passkey or add a passkey. The site will ask you to confirm your identity — you may need to enter your current password or verify a code sent to your email. Once confirmed, your device will prompt you to unlock it using Face ID, Touch ID, or your device PIN. That's the unlock method that will protect this passkey going forward.

Your iPhone or iPad will then ask where you want to save the passkey. Choose "iCloud Keychain" if you want the passkey to sync across your Apple devices. If you choose "This iPhone" or "This iPad," the passkey stays only on that device. After you confirm, the passkey is created and ready to use.

How to create a passkey on Android

Open the website or app and navigate to account settings, then security or sign-in methods. Look for an option to create a passkey or add a passkey. You'll be asked to verify your identity with your current password or an email code.

Android will then prompt you to unlock your device using your fingerprint, face recognition, or PIN. Choose the unlock method you use most often — this is what you'll use every time you sign in with this passkey. After you unlock, Android asks where to save the passkey: choose "Google Account" if you want it to sync across your Android devices and the web, or "This device only" to keep it local.

Once saved, the passkey is active. If you chose Google Account, you can use this passkey to sign in on other Android phones, tablets, or computers linked to the same Google Account.

How to create a passkey on Windows

Log into the website or app and go to account settings, then security or sign-in methods. Select the option to create a passkey. Verify your identity with your current password or email code.

Windows will ask you to set up or confirm your unlock method — this can be Windows Hello (face or fingerprint), a PIN, or a password. Choose the method you already use to unlock your computer. After you confirm, the passkey is created and synced to your Microsoft Account if you're signed in.

If you're not signed into a Microsoft Account on your Windows computer, the passkey will stay on that device only. To use the passkey on other devices, you'll need to be signed into the same Microsoft Account on those devices.

What to do if a website doesn't support passkeys yet

Many websites still don't offer passkeys as a sign-in option. You can check whether a site supports passkeys by looking in its security settings — if there's no option to create a passkey, the site hasn't added support yet.

For sites without passkeys, you can still use a password manager to create and store strong passwords. Password managers like Bitwarden, 1Password, or your device's built-in password manager (iCloud Keychain, Google Password Manager, or Windows Credential Manager) can fill in passwords automatically and keep them encrypted on your device.

Some sites are adding passkey support gradually. If you see a passkey option appear in a site's security settings, that means they've recently added support. You can create a passkey at that point and stop using a password for that account.

Backing up your passkeys and what happens if you lose your device

Passkeys sync automatically across your devices if you use the same account system. If you have an iPhone and a Mac both signed into the same iCloud account, your passkeys are available on both. If you lose your iPhone, your passkeys are still on your Mac and any other Apple device signed into that iCloud account.

If you lose all your devices at once, you won't be able to use your passkeys. This is why most sites that support passkeys also let you keep a backup sign-in method — usually a recovery code, a backup email address, or a phone number. When you create your first passkey on a site, look for an option to save recovery codes or set up a backup method. Store recovery codes somewhere safe, separate from your devices — a printed copy in a safe, or a note in a password manager.

If you're locked out of an account, you can usually use the recovery code or backup method to regain access, then create a new passkey on a device you do have.

Frequently Asked Questions

Can I use the same passkey on multiple websites?

No. Each website creates its own passkey for your account on that site. You create one passkey per account, per website. Your device manages all of them, but they're separate credentials.

What if I forget my device PIN or my fingerprint stops working?

Your passkeys are protected by your device's unlock method. If you change your device PIN or update your fingerprint, your passkeys still work — they're tied to your device's security system, not to a specific PIN or fingerprint. If you can't unlock your device at all, you'll need to reset your device, which will erase your passkeys unless they're synced to your account system (iCloud, Google Account, or Microsoft Account).

Do I need to create a passkey on every device I own?

No. If your passkeys sync through iCloud, Google Account, or Microsoft Account, you create the passkey once and it's available on all your signed-in devices. You only need to create a separate passkey if you want a device-specific one that doesn't sync.

Can someone use my passkey if they steal my phone?

Not without unlocking your phone first. Passkeys are encrypted and protected by your device's unlock method. A thief would need your fingerprint, face, or PIN to unlock your device before they could use any passkey stored on it.

What's the difference between a passkey and two-factor authentication?

A passkey replaces your password entirely. Two-factor authentication (2FA) is an extra security step added on top of a password — you sign in with your password, then confirm your identity a second way, like a code from an app. Some sites let you use a passkey as your only sign-in method, while others use passkeys alongside 2FA for extra security.