What is a Passkey?
This short guide is a reference tool to help refresh your knowledge or practise what you have learned in the What is a Passkey? online video course.
Passwords vs passkeys
Passwords can be difficult to remember and type, and they can be stolen or leaked.
Passkeys are a safer way to sign in to your online accounts. Instead of typing a password, you use your device’s built-in security — like your fingerprint, face ID, or PIN — to confirm it’s really you.
How passkeys work
A passkey replaces your password with a unique digital key that your device creates and stores securely.
When you sign in to a website or app that uses passkeys:
- The website checks the passkey stored on your device instead of asking for a password.
- Your passkey never leaves your phone, tablet or computer, so it can’t be stolen or leaked.
- Your fingerprint, face ID or PIN verifies that you are the owner of the passkey.
Passkeys work on most phones, tablets and computers.
To use a passkey, you must have a PIN, fingerprint, or face unlock set up on your device.
Passkeys can be synced across devices using Apple Keychain, Google Password Manager, or some password managers.
You can back up your passkeys to the cloud (for example, iCloud or your Google Account) so they can be restored if you get a new device.
Many major companies and government services — such as myGov, Apple, Microsoft, eBay, PayPal and some banks — offer passkeys as a preferred login option.