Passwords are slowly being replaced by something better: passkeys. They let you sign in with your face, fingerprint or device PIN — no password to type, remember or leak — and they are nearly impossible to phish. If you have been curious how to start, it is easier than you think. Our GetMyPassword team walks through how to set up and use passkeys.
What a passkey is, briefly
A passkey replaces a password with a secure key stored on your device, unlocked by your fingerprint, face or PIN. There is nothing to type and nothing for a thief to steal or trick out of you, which makes passkeys resistant to phishing. To log in, you simply confirm it is you on your device, the same way you unlock your phone.
How to set one up
- On an account that supports passkeys, open its Security settings.
- Choose “Create a passkey” or “Add a passkey.”
- Confirm with your fingerprint, face or device PIN when prompted.
- That is it — next time, you sign in with that same gesture instead of a password.
Using them across your devices
Passkeys sync securely through your Apple, Google or Microsoft account, or your password manager, so a passkey made on your phone works on your laptop too. To sign in on a device that does not have it, most services let you scan a QR code with your phone to approve the login. You are never stuck — your phone can vouch for you anywhere.
The magic of a passkey is that there is no secret to phish. An attacker cannot trick you into typing a passkey into a fake site, because there is nothing to type — your device proves it is you, and only to the real site.
Keep a backup, and passwords for the rest
Since passkeys sync through your cloud account, protect that account well — a strong password and 2FA on your Apple, Google or password-manager account is what keeps your passkeys recoverable if you lose a device. Not every site supports passkeys yet, so you still need strong, unique passwords for the others; create them with our password generator. Adopt passkeys where you can, and let them quietly take over as more sites add support.
Frequently asked questions
How do I set up a passkey?
On an account that supports passkeys, open Security settings, choose “Create a passkey,” and confirm with your fingerprint, face or device PIN. After that you sign in with that gesture instead of typing a password.
What happens to my passkeys if I lose my phone?
Passkeys sync through your Apple, Google, Microsoft or password-manager account, so they are restored when you sign in to that account on a new device. This is why protecting that account with a strong password and 2FA matters.
Are passkeys better than passwords?
For security and convenience, generally yes. Passkeys cannot be phished or reused, and there is nothing to type or remember. Until every site supports them, though, you still need strong unique passwords for the rest.