What it is
A passkey is a sign-in that lives on your phone, tablet or computer. When you sign in, your device asks you to unlock it the usual way, with your fingerprint, face or screen lock, and that proves it’s you.
Google says your fingerprint or face data stays on your device and is never shared with Google.
Why it’s safer than a password
- There’s nothing to remember, so nothing to forget or reuse.
- It can’t be given away. Google says passkeys can’t be shared, copied, written down or accidentally given to someone else, which makes them far harder to steal with a scam message.
- It’s always strong. Apple says passkeys are resistant to phishing and are always strong.
Set one up for your Google Account
You need a phone with a screen lock turned on (Android 9 or iOS 16 or later), or a recent computer.
- On your own phone or computer, go to myaccount.google.com/
signinoptions/ and sign in if asked.passkeys - Tap Create a passkey, then Create a passkey again.
- Unlock your device when asked, with your fingerprint, face or PIN.
Only create passkeys on devices you own. Google warns not to make one on a shared device, because anyone who can unlock it could sign in as you.
Other accounts
The UK government’s Stop! Think Fraud campaign says many sites will offer to add a passkey after you sign in. If they don’t, look in your Account settings. Your phone saves and manages the passkey for you.
If a site doesn’t offer passkeys yet, use a strong, separate password and two-step verification.
Next: turn on two-step verification for accounts without passkeys.
Sources
- Stop! Think Fraud (UK government, with the NCSC), Passkeys and 2 step-verification: what you need to know, checked 14 Oct 2026.
- Google Account Help, Sign in with a passkey instead of a password, checked 14 Oct 2026.
- Apple Support, About the security of passkeys, checked 14 Oct 2026.