How to Set Up and Share Passkeys in iCloud Keychain on iPadOS 18

Traditional alphanumeric passwords remain the primary vector for credential theft, phishing campaigns, and account compromises. Built on the WebAuthn and FIDO2 standards, Passkeys replace passwords with cryptographic public-private key pairs stored securely within device hardware. On iPadOS 18, Apple provides a standalone Passwords app and end-to-end encrypted iCloud Keychain syncing, allowing users to authenticate via Touch ID or Face ID across devices and securely share credentials with trusted family or team groups.

Understanding Passkey Cryptography and iPadOS Architecture

When you register a passkey for an online service (such as Google, GitHub, or Amazon), your iPad generates a unique cryptographic key pair:

• Public Key: Transmitted to the online service and stored in its user database. The public key is completely safe if exposed, as it cannot be used alone to authenticate.
• Private Key: Generated and safeguarded by the Secure Enclave on your iPad. It never leaves your personal hardware and is never transmitted over network connections.
• End-to-End Encryption: iCloud Keychain synchronizes private keys between your iPad, iPhone, and Mac using keys derived from your Apple Account credentials and device passcodes, ensuring Apple cannot read or access your credentials.

Enabling iCloud Keychain and AutoFill on iPad

Before generating or sharing passkeys, confirm that iCloud Keychain synchronization and credential autofill are active on your iPad:

1. Open the Settings app on your iPad running iPadOS 18.
2. Tap your Apple Account profile banner at the top of the sidebar.
3. Select iCloud and tap Passwords and Keychain under the Saved to iCloud section.
4. Verify that Sync this iPad is toggled to On.
5. Return to the main Settings menu and navigate to General > AutoFill & Passwords.
6. Ensure that AutoFill Passwords and Passkeys is enabled and that Passwords is selected as the active provider.

Creating a Passkey on a Supported Website or App

To upgrade an existing account from a password to a passkey:

1. Launch Safari on your iPad and sign into the target service account (e.g., account security or sign-in settings).
2. Locate the Security, Two-Factor Authentication, or Passkeys configuration section.
3. Select Add a Passkey or Create a Passkey.
4. An iPadOS system prompt appears asking: “Do you want to save a passkey for [account]?”
5. Confirm using Touch ID or Face ID. Your private key is created instantly and linked to the account.

Managing Stored Passkeys in the iPadOS 18 Passwords App

iPadOS 18 replaces old settings menus with a dedicated, unified Passwords application:

1. Open the Passwords app from your iPad Home Screen or App Library.
2. Authenticate using Face ID, Touch ID, or your iPad passcode.
3. Tap the Passkeys filter category in the sidebar to view all accounts using cryptographic key pairs.
4. Tap any entry to view associated user handles, creation dates, and linked domains.
5. To delete a passkey, tap Delete Passkey. Note that you should also remove the passkey registration from the online service settings to avoid lockouts.

Securely Sharing Passkeys via Shared Groups

To collaborate on accounts with family members or team colleagues without sharing plain passwords:

1. In the Passwords app sidebar, tap the Add (+) button or select New Shared Group.
2. Name the group (e.g., Engineering Shared Logins or Family Accounts) and add trusted contacts from your Address Book. All participants must have devices running recent OS versions with iCloud Keychain enabled.
3. Select the passkeys and accounts you wish to move into the shared vault and tap Move.
4. Members receive an invitation to join. Once accepted, the passkeys sync automatically and remain accessible via AutoFill across all member devices, with real-time updates whenever credentials are modified.