A passkey replaces your password with your face, fingerprint, or PIN, the same way you already unlock your phone. It can’t be phished, and there’s nothing for hackers to steal in a data breach. This guide explains what a passkey is, and shows how to create your first one for a Google Account and a Microsoft account.
How to what is a passkey: step by step
?What’s a passkey?
A passkey proves it’s you using your face, fingerprint, or PIN, the same way you unlock your phone.
1Google Account: Security → Passkeys and security keys
Go to Security, then Passkeys, and click Create a passkey.
2Microsoft account: Security → Add a new way to sign in or verify
Choose Face, fingerprint, PIN, or security key, and click Next.
Why a passkey is safer
- Can’t be phished — A passkey only works on the real site, so a fake login page can’t steal it.
- Nothing to leak — There’s no password sitting in a database for hackers to steal.
- Faster, too — One glance, or one touch, and you’re signed in.
A few tips
- Syncs across your devices — Set one up on your phone, and it’s often ready on your other devices too.
- Only on your own device — Don’t create a passkey on a shared or public computer.
- Your password still works — You can keep it as a backup, but the passkey is the faster, safer way in.
Recap: set up a passkey
- A passkey uses your face, fingerprint, or PIN — no password
- Google: Security → Passkeys → Create a passkey
- Microsoft: Security → Add a new way to sign in → Face, fingerprint, PIN, or security key
- Only set one up on a device you own
Printable quick guide
Frequently asked questions
Is a passkey the same as a password manager?
No. A password manager stores existing passwords for you. A passkey replaces the password entirely, using your device’s face, fingerprint, or PIN check instead.
What happens if I lose my phone or computer?
If your passkeys sync to your account (through Google, Apple, or Microsoft), they’re usually available on your next device too. Your password, if you kept one, still works as a backup.
Can someone steal my passkey the way they steal a password?
It’s much harder. A passkey only works on the real website it was created for, so a fake look-alike login page can’t use it, and there’s no password sitting in a database to leak.
Do I have to delete my password after setting up a passkey?
No. Most accounts let you keep your password as a backup sign-in option alongside your new passkey.
Related guides
- How to Turn On Two-Factor Authentication
- Password managers: why you need one and how to start
- What to do if your email was hacked
Source: Create and save a passkey (Microsoft Support)