What a passkey is and why you'd use one

A passkey is a way to sign into apps and websites using your face or fingerprint instead of typing a password. When you add a passkey to your iPhone, you're storing a digital key on your device that proves who you are — without ever creating or remembering a password for that particular account.

The main reason to use a passkey is that it's harder to hack than a password. A password can be guessed, stolen from a data breach, or tricked out of you. A passkey is tied to your specific iPhone and your biometric data (your face or fingerprint), so someone else can't use it even if they know your username.

Right now, passkeys work on some popular services — Apple, Google, Microsoft, PayPal, and a growing list of others support them. Your bank or email provider may not yet, but the number of places that accept passkeys is expanding. You can check whether a specific service supports passkeys by looking for language like "sign in with a passkey" or "passwordless sign-in" on their login page.

Key Takeaways

  • You create a passkey directly in the app or website where you want to use it, not in iPhone Settings — the process starts on the service's login page.
  • Your iPhone stores the passkey locally and uses your Face ID or Touch ID to unlock it each time you sign in.
  • A passkey only works on the iPhone where you created it unless you turn on iCloud Keychain syncing, which copies it to your other Apple devices.
  • If you lose your iPhone or forget your Face ID, you can still sign in using a backup method the service provided when you set up the passkey.

How to create a passkey on an app or website

The steps vary slightly depending on which service you're using, but the general process is the same. Open the app or website where you want to add a passkey, go to your account settings or security page, and look for an option that says "add a passkey," "create a passkey," or "sign in with a passkey."

When you tap that option, your iPhone will ask you to confirm your identity using Face ID or Touch ID. After you do, the service will create the passkey and store it on your device. You'll see a confirmation message — usually something like "Passkey created successfully" — and you're done. The next time you sign in, you'll be able to use that passkey instead of typing a password.

Some services let you create a passkey right from the login screen. If you see a button that says "create a passkey" or "sign up with a passkey," you can tap it and follow the same process. The service will create both your account and your passkey at the same time.

What happens when you sign in with a passkey

Once you've created a passkey, signing in is faster than using a password. Open the app or website, tap the login field, and your iPhone will automatically suggest your passkey. Tap it, confirm with Face ID or Touch ID, and you're signed in — usually in under five seconds.

If Face ID or Touch ID doesn't work for some reason (your face is covered, your finger is wet, or you've tried too many times), your iPhone will offer other ways to unlock the passkey. You can use your iPhone passcode instead, or the service may offer a backup sign-in method like a code sent to your email or phone number.

How passkeys sync across your Apple devices

By default, a passkey you create on your iPhone stays only on that iPhone. If you try to sign in on your Mac or iPad, you won't have access to that passkey and will need to use a password or create a new passkey on that device.

If you turn on iCloud Keychain, your passkeys automatically sync to your other Apple devices — your Mac, iPad, and Apple Watch. This means you can create a passkey on your iPhone and use it to sign in on your Mac without doing anything extra. To turn on iCloud Keychain, go to Settings > [Your Name] > iCloud and toggle on Keychain.

Syncing only works between your own Apple devices. If you want to sign in on an Android phone or a Windows computer, you'll need to create a separate passkey on that device, or use a password if the service doesn't support passkeys there.

What to do if you lose your iPhone or can't use Face ID

If you lose your iPhone or your Face ID stops working, you can still sign into accounts where you created passkeys. When you try to sign in, the service will notice that you don't have access to your passkey and will offer a backup sign-in method — usually a code sent to your email address or phone number, or security questions you answered when you set up the account.

Once you're signed in using the backup method, you can create a new passkey on your replacement iPhone or repaired device. The old passkey on your lost iPhone becomes useless because it's tied to that specific device.

If you have iCloud Keychain turned on and you get a new iPhone, your passkeys will automatically restore from your iCloud backup. You won't need to recreate them — just sign in with your Apple ID and they'll be there.

Services that currently support passkeys

Major tech companies and financial services have added passkey support, but not every service offers it yet. Apple, Google, Microsoft, Amazon, PayPal, and Shopify all support passkeys. Many banks are adding them, though the timeline varies by institution.

The easiest way to find out whether a specific service supports passkeys is to visit their login page and look for language about "passwordless sign-in" or "sign in with a passkey." If you don't see it, you can contact their support team and ask whether passkeys are on their roadmap.

Even if a service doesn't support passkeys yet, you can still use a strong, unique password and store it in your iPhone's built-in password manager (also part of iCloud Keychain). That's more secure than reusing the same password across multiple services.

Frequently Asked Questions

Can I use the same passkey on multiple devices?

A passkey created on your iPhone only works on that iPhone unless you have iCloud Keychain turned on. With iCloud Keychain, the passkey syncs to your other Apple devices automatically. To use a passkey on an Android phone or Windows computer, you need to create a separate passkey on that device.

What if a website asks me to create a passkey but I'm not ready?

You don't have to create a passkey. You can dismiss the prompt and continue using your password. Most services let you create a passkey whenever you want — there's no deadline or requirement. You can add one later if you change your mind.

Is a passkey safer than a password?

Yes. A passkey is tied to your iPhone and your biometric data, so it can't be guessed or stolen from a data breach the way a password can. Someone would need physical access to your iPhone and your face or fingerprint to use your passkey, which is much harder than stealing a password online.

What happens if I forget my iPhone passcode?

If you forget your iPhone passcode, you can still sign into accounts using the backup sign-in method the service provided — usually a code sent to your email. You'll need to reset your iPhone passcode separately through Apple's account recovery process.

Can I delete a passkey and create a new one?

Yes. Go to the service's account settings, find the passkey section, and look for a delete or remove option. Once you delete it, you can create a new passkey by following the same steps you used the first time. Some services let you have multiple passkeys on the same account for backup.