Passwords have been the standard for online security for decades, but they are inherently flawed. They can be guessed, stolen in data breaches, or easily handed over to phishing websites. To combat this, Google, Apple, and Microsoft are driving the industry toward Passkeys.
A passkey allows you to sign in to your Google Account securely using the exact same method you use to unlock your device: your fingerprint, your face scan (like Face ID or Windows Hello), or your local screen PIN.
In this guide, we will explain how passkeys work and show you how to set one up for your Google Account to dramatically improve your security while making logging in faster.
What is a Passkey?
A passkey is a digital credential tied directly to your physical device (like your phone or laptop). It uses public key cryptography. When you set it up, two keys are created:
- A Public Key: This is stored on Google’s servers. It contains no secret information.
- A Private Key: This remains securely locked inside the hardware of your device (like the Secure Enclave on an iPhone or the TPM chip on Windows). It never leaves your device.
When you attempt to log in, Google sends a mathematical challenge to your device. Your device unlocks the private key using your biometrics (fingerprint/face) and solves the challenge, proving you are you. Because the private key never travels across the internet, it is completely immune to phishing; a fake website cannot steal it.
How to Create a Passkey for Your Google Account
You can create a passkey on any modern smartphone, tablet, or computer that supports biometrics or a local PIN.
- Open a web browser on the device you want to create the passkey on (e.g., your smartphone or your laptop).
- Navigate to myaccount.google.com and ensure you are signed in.
- Select Security from the left-hand navigation menu (on mobile, you will need to swipe across the top tabs to find it).
- Scroll down to the "How you sign in to Google" section.
- Tap or click on Passkeys (you may be prompted to enter your current password to verify it is you).
- Click the Create a passkey button.
- A system prompt will appear. Google will ask you to verify your identity using the device’s built-in security. Follow the on-screen instructions to scan your fingerprint, use facial recognition, or enter your device PIN.
- Once verified, Google will confirm that the passkey has been created.
Note: If you use an Android device that is signed into your Google account, Google may have automatically created a passkey for that specific device already.
How to Log In Using Your Passkey
Once your passkey is set up, logging into your Google Account becomes incredibly simple.
- Go to a Google login page (like Gmail).
- Enter your email address and click Next.
- Instead of asking for a password, Google will automatically detect that you have a passkey available. It will prompt you to "Use your passkey to confirm it’s really you."
- Click Continue.
- Scan your fingerprint or face, or enter your device PIN.
- You are instantly logged in. No password typing, and no waiting for an SMS two-factor authentication code.
What Happens If You Lose Your Device?
Many users worry about losing the device holding their passkey. The good news is that you are not locked out.
Firstly, passkeys are often synced to cloud ecosystems. If you create a passkey on an iPhone, it is saved in iCloud Keychain and automatically available on your Mac or new iPhone. Similarly, Android passkeys are synced via Google Password Manager.
Secondly, your passkey does not immediately replace your password. If you lose the physical device, you can always click "Try another way" during login. You can then use your traditional password and an alternative two-factor authentication method (like a backup code or another device prompt) to regain access to your account and revoke the lost device’s passkey.
