The best password might be the one you never have to type. Passkeys take a familiar action—unlocking a device—and put it to work for signing in.
A key, not a secret word
A passkey is a cryptographic credential that replaces a typed password. To use one, you typically perform a familiar local action, such as a fingerprint check, face scan, device PIN, or interaction with a security key.
Underneath that simple interaction is public-key cryptography. The service does not receive a reusable password. That changes the mechanics of signing in without requiring you to memorize the cryptography.
Why the difference matters
Passkeys are designed for phishing-resistant sign-in. Instead of asking you to type a shared secret into a page that might be an imitation, the credential participates in a sign-in process tied to the service.
If you unlock a passkey with a biometric check, your biometric information stays on your device. The service receives confirmation that the local check succeeded, not a copy of your fingerprint or face.
Know your way back in
Some passkeys sync through a provider. Others remain tied to a particular device or physical security key. That distinction matters when a phone breaks, a laptop is replaced, or a key goes missing.
Before removing an older sign-in method, learn the service’s recovery process and make sure you have an appropriate backup. Availability and recovery options vary by service. Better security should come with a plan for getting back into your own account.
Passkeys make a familiar device unlock part of a stronger sign-in process. Set them up with recovery in mind.
Don't just take our word for it.
FIDO Alliance: how passkeys work ↗Source-based editorial guide. Sources reviewed October 25, 2026. Illustrations are conceptual and do not depict a reviewed product.
