How to Set Up Passkeys and Use Fewer Passwords

A passkey is a safer way to sign in that replaces typing a password. Instead of something you have to remember, your device proves it is you — usually with your fingerprint, face, or device PIN — and the site checks a matching key it holds. There is no password for a phishing site to steal.

Follow these steps

1. Start with an account that supports passkeys. Sign in to an account you use often, open its security or sign-in settings, and look for a passkeys option. If you do not see one, that account may not offer passkeys yet — passwords and two-factor authentication still protect it.
2. Create the passkey on a device you trust. Choose to create a passkey and confirm with your fingerprint, face, or device PIN when asked. Your device creates a private key it keeps, and sends only a matching public key to the site.
3. Let it sync somewhere you can recover it. On most phones and computers, passkeys sync through your device's built-in password system or your password manager. Check that syncing is on, so a passkey is not trapped on a single device.
4. Test signing in with the passkey. Sign out and sign back in, choosing the passkey option. You should be signed in after your fingerprint, face, or PIN, with no password typed at all.
5. Keep a second way in. Until you are confident, keep your password or another sign-in method available for that account, and make sure your recovery options — such as a trusted device or recovery code — are up to date.
6. Add passkeys to your important accounts gradually. Repeat the process for your email and other important accounts, one at a time. You do not need to switch everything at once, and mixed sign-ins are completely normal while you learn.

After your first few passkeys, signing in feels noticeably simpler — and phishing emails lose much of their power, because there is no password to give away. Keep your device's lock screen strong, and your passkeys will stay protected with it.