What a passkey is and why you'd create one

A passkey is a way to sign into apps and websites using your phone instead of typing a password. When you create a passkey, your phone stores a digital key that proves who you are. The app or website you're signing into never sees or stores your actual password — it just confirms that your phone has the right key.

Passkeys work through a system called passwordless authentication. Instead of remembering a string of characters, you unlock your phone with your fingerprint, face recognition, or PIN, and that's enough to prove you're the account owner. This is more secure than passwords because there's no password for someone to guess, steal, or intercept.

You create a passkey the first time you sign into a service that supports them. Not every app or website offers passkeys yet — common ones include Google, Microsoft, GitHub, and some banks — but the number grows regularly. If a service supports passkeys, you'll see an option during sign-up or login that says something like "Create a passkey" or "Use passkey instead".

Key Takeaways

  • A passkey is stored on your phone and uses your fingerprint or face to unlock it, replacing the need to type a password.
  • You create a passkey during sign-up or login on an app or website that supports them — look for a "Create passkey" button.
  • Your phone must have a lock screen set up (PIN, pattern, fingerprint, or face) before you can create a passkey.
  • If you lose your phone, you can still sign in on another device using a backup method the service provides, usually a recovery code or backup email.
  • Passkeys are safer than passwords because they can't be guessed, phished, or reused across multiple services.

Setting up your phone to create passkeys

Before you can create a passkey on Android, your phone needs a lock screen. Open Settings, tap Security and privacy (or Security, depending on your Android version), then look for Screen lock or Lock screen. Choose a PIN, pattern, or biometric method like fingerprint or face unlock. This lock is what protects your passkeys — without it, anyone with your phone could sign into your accounts.

You also need a Google account set up on your phone. Most Android phones come with this already, but if you're not sure, open Settings, tap Accounts, and look for your Google account listed. If it's not there, tap Add account and follow the steps to sign in with your Google credentials.

Once your lock screen and Google account are in place, your phone is ready to create and store passkeys. Android stores passkeys in Google Password Manager, which is built into your phone and syncs across your devices if you're signed into the same Google account.

Creating a passkey during sign-up

When you create a new account on a service that supports passkeys, the sign-up flow usually offers passkey creation as an option. After you enter your email and choose a password (or instead of a password), you'll see a prompt like "Create a passkey for this account" or "Save a passkey". Tap that option.

Your phone will ask you to unlock it — use your fingerprint, face, or PIN. This confirms that you're the person holding the phone. Once you unlock it, the passkey is created and stored on your phone automatically. You won't see a code or key to write down; the system handles it all behind the scenes.

Some services let you create a passkey right away, while others let you set a password first and add a passkey later. If you don't see a passkey option during sign-up, check the account settings after you've signed in — there's often a security section where you can add one.

Creating a passkey when you already have an account

If you already have an account on a service and want to add a passkey, sign in normally with your password. Then go to your account settings — this is usually under a menu labeled Account, Security, Settings, or your profile picture. Look for a section about passwords or sign-in methods.

You should see an option to "Add a passkey", "Create a passkey", or "Set up passwordless sign-in". Tap it. Your phone will ask you to unlock it with your fingerprint, face, or PIN. Once you do, the passkey is created and linked to your account.

After you've created a passkey, you can usually still sign in with your password if you want to — most services let you use either method. Some services eventually let you delete your password entirely once you're confident with passkeys, but that's optional.

Signing in with a passkey

The next time you open an app or website where you've created a passkey, look for a sign-in option that says "Sign in with passkey" or shows a fingerprint icon. Tap it. Your phone will ask you to unlock it — use your fingerprint, face, or PIN. That's it. You're signed in.

On a website in your browser, the process is similar. When you reach the sign-in page, you'll see a passkey option. Tap it, unlock your phone, and the website confirms who you are and signs you in.

If you're signing in on a different device — like a computer — you can still use your Android phone's passkey. The service will show you a QR code or a button that says "Use your phone". Open the camera app or tap the button on your phone, and it will ask you to unlock your phone. Once you do, you're signed in on the computer.

What happens if you lose your phone or switch to a new one

If your passkeys are synced to your Google account, they'll be available on any Android phone you sign into with the same Google account. When you set up a new phone and sign in with your Google account, your passkeys come with it automatically.

If you lose your phone before setting up a new one, you can still sign into your accounts. Most services that support passkeys also provide a backup sign-in method — usually a recovery code you saved when you created the passkey, or a backup email address. Use that method to sign in, and then you can create a new passkey on your new phone.

This is why it's worth saving any recovery codes a service offers when you create a passkey. Write them down or store them somewhere safe, separate from your phone. If you lose access to both your phone and your recovery codes, you may need to go through an account recovery process with the service, which can take longer.

Troubleshooting passkey problems

If you see an error when trying to create a passkey, the most common cause is that your phone's lock screen isn't set up. Go back to Settings > Security and privacy > Screen lock and make sure you have a PIN, pattern, or biometric lock enabled. Then try creating the passkey again.

If your phone asks you to unlock it but your fingerprint or face isn't working, you can use your PIN instead. If you've forgotten your PIN, you'll need to unlock your phone through your Google account or another recovery method before you can create or use passkeys.

If a service says it doesn't support passkeys, it may not have rolled out the feature yet, or it might be available only in certain regions. Check the service's help documentation or try again in a few weeks — passkey support is being added to more services regularly.

Frequently Asked Questions

Can I use the same passkey on multiple devices?

If your devices are signed into the same Google account, your passkeys sync automatically and work on all of them. If you use a different Google account on another device, you'll need to create a separate passkey on that device for the same account.

What if I want to delete a passkey?

Go to the account settings on the service where you created it, find the security or sign-in methods section, and look for an option to remove or delete the passkey. You can also manage all your passkeys in Google Password Manager by opening Settings > Google > Manage your Google Account > Security > Password Manager.

Is a passkey safer than a password?

Yes. Passkeys can't be guessed, phished, or reused across services the way passwords can. Even if someone steals your passkey data, they can't use it without unlocking your phone first. The main risk is losing your phone, but recovery codes protect you in that situation.

Do I need to remember my passkey?

No. Your phone stores and manages the passkey automatically. You only need to remember your phone's unlock method — your fingerprint, face, or PIN.

Can I create a passkey without a Google account?

On most Android phones, passkeys are stored through Google Password Manager, so you need a Google account. Some services may offer alternative passkey storage through other providers, but Google's system is the standard on Android.