What a passkey is and why you'd create one
A passkey is a digital credential stored on your device that unlocks your accounts without requiring you to type a password. Instead of remembering a complex string of characters, you unlock the passkey using your device's built-in security — your fingerprint, face recognition, or a PIN. When you log into a website or app that supports passkeys, your device confirms your identity and grants access.
Passkeys are more secure than passwords because they cannot be stolen through data breaches the way passwords can. A hacker cannot use your passkey on another device or website because the passkey is locked to your specific device and the specific service you created it for. You create a new passkey for each account, so compromising one passkey does not expose your other accounts.
Most modern devices now support passkeys, including iPhones, Android phones, Windows computers, and Macs. Major services like Google, Microsoft, Apple, Amazon, and many banks now let you create passkeys instead of passwords. The process differs slightly depending on your device and the service, but the basic steps are similar across all of them.
Key Takeaways
- Passkeys are stored on your device and unlocked with your fingerprint, face, or PIN instead of a typed password.
- You create a passkey directly in your account settings on the website or app you want to secure.
- The exact steps depend on which service you are using, but most ask you to verify your identity first, then confirm your device's biometric or PIN.
- Once created, your passkey works only on the device where you created it unless you sync it to other devices through your account.
- You can create multiple passkeys for the same account on different devices so you can sign in from any of them.
How to create a passkey on an iPhone or iPad
Start by opening the website or app where you want to create a passkey. Go to your account settings or security settings — this is usually found under a menu labeled "Account," "Settings," or a gear icon. Look for an option that says "Passkeys," "Passwordless sign-in," "Security keys," or "Sign-in methods."
Tap the button to create a new passkey. The website or app will ask you to verify your identity by entering your current password or a verification code sent to your email or phone. This step confirms you are the account owner before creating a new way to sign in.
Once verified, your iPhone will show a prompt asking you to create a passkey. Tap "Create Passkey" or "Continue." Your device will ask you to unlock it using Face ID or Touch ID — use whichever method your iPhone is set up with. After you unlock it, the passkey is created and stored on your device. The website will confirm that your passkey is ready to use.
From now on, when you sign into that account on your iPhone, you will see an option to sign in with your passkey instead of entering a password. Tap it, unlock your device with Face ID or Touch ID, and you are logged in.
How to create a passkey on an Android phone
Open the website or app where you want to create a passkey and navigate to your account or security settings. Look for "Passkeys," "Passwordless sign-in," or "Security settings." Tap the option to create a new passkey.
Verify your identity by entering your password or confirming a code sent to your email or phone. Android will then prompt you to create a passkey. Tap "Create" or "Continue." Your phone will ask you to unlock it using your fingerprint, face recognition, or PIN — whichever method you have set up. Complete the unlock, and your passkey is created.
Some Android phones store passkeys in Google Password Manager by default. This means your passkey can sync across your Android devices if you are signed into the same Google account. When you sign into the account on another Android device, you can use the same passkey if it has synced, or create a new passkey on that device.
How to create a passkey on Windows
Open the website or app where you want to create a passkey. Go to account settings or security settings and find the option for passkeys or passwordless sign-in. Click the button to create a new passkey.
Verify your identity with your current password or a verification code. Windows will then prompt you to create a passkey. Click "Create" or "Next." Your computer will ask you to unlock it using Windows Hello — this means using your fingerprint, face recognition, or PIN. Complete the unlock, and your passkey is stored on your computer.
If you are signed into a Microsoft account on your Windows computer, your passkey can sync to other Windows devices and your phone through your Microsoft account. This means you can sign into the account from any of your synced devices using the same passkey.
How to create a passkey on a Mac
Open the website or app where you want to create a passkey. Navigate to your account settings or security settings and look for passkeys or sign-in methods. Click the option to create a new passkey.
Verify your identity by entering your password or confirming a code sent to your email or phone. Your Mac will then ask you to create a passkey. Click "Create" or "Continue." Your Mac will prompt you to unlock it using Touch ID or your Mac password. Complete the unlock, and your passkey is created and stored on your Mac.
If you are signed into an Apple account on your Mac, your passkey can sync to your iPhone, iPad, and other Apple devices through iCloud Keychain. This means you can sign into the account from any of your Apple devices using the same passkey.
What to do if a website does not support passkeys yet
Not every website or app supports passkeys. If you cannot find a passkey option in your account settings, the service does not offer them yet. You can still use a strong password and enable two-factor authentication as a more secure alternative.
Two-factor authentication requires you to enter a code from your phone or email in addition to your password when you sign in. This adds a second layer of security even if your password is compromised. Many services that do not yet support passkeys do support two-factor authentication.
Check back periodically on services you use frequently. More websites and apps are adding passkey support every month. When your bank, email provider, or other important account adds passkey support, you can create one and retire your password for that account.
Syncing passkeys across your devices
When you create a passkey on one device, it does not automatically appear on your other devices. However, if you are signed into the same account across your devices — such as your Apple account, Google account, or Microsoft account — your passkey can sync automatically.
On Apple devices, passkeys sync through iCloud Keychain. If you are signed into the same Apple ID on your iPhone, iPad, and Mac, a passkey you create on one device will appear on the others within a few minutes.
On Android and Windows devices, passkeys sync through your Google account or Microsoft account. If you are signed in with the same account on multiple devices, your passkeys will sync across them.
You can also create separate passkeys for the same account on different devices. For example, you might create one passkey on your iPhone and a different passkey on your Mac. Both will work to sign into that account, and you can use whichever device is nearest to you.
Frequently Asked Questions
What happens if I lose the device where I created my passkey?
If your device is lost or stolen, your passkey is locked to that device and cannot be used on another device unless it synced to your account. If it did sync — through iCloud, Google, or Microsoft — you can still sign in from your other devices. If it did not sync and you have no other devices with that passkey, you will need to use your password or a recovery method to regain access to your account.
Can I use the same passkey on multiple websites?
No. Each passkey is created specifically for one website or app. You create a separate passkey for your email, your bank, your social media account, and so on. This is a security feature — if one passkey were somehow compromised, it would only unlock that one account, not all your accounts.
Do I still need a password if I create a passkey?
Once you create a passkey, you can usually sign in without your password. However, most services keep your password active as a backup. If you lose access to your device or your passkey stops working, you can still sign in with your password. Some services let you delete your password once you have a passkey, but this is optional.
What if I forget my device PIN or my fingerprint does not work?
Your passkey is unlocked using your device's security — the same PIN, fingerprint, or face recognition you use to unlock your phone or computer. If you cannot unlock your device, you cannot use your passkey. You would need to sign in using your password instead. Make sure your device's biometric or PIN is working before you rely on passkeys as your only sign-in method.
Can someone else use my passkey if they have my device?
No. Your passkey is protected by your device's security. Even if someone has your phone or computer, they cannot use your passkey without unlocking your device first with your fingerprint, face, or PIN. This is why passkeys are more secure than passwords — a password can be typed by anyone, but a passkey requires your biometric or PIN.