DriversCrashes, No Sound, or Screen Glitches?PerformanceWindows Errors? Fix Them Before They SpreadDriversOutdated Drivers Are Slowing You Down
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
To enable a passkey, sign in to an account, open its security or sign-in settings, choose the passkey option, then follow the device prompt to create and unlock it. The service must support passkeys, and the route for storing and using one depends on your device and credential manager. Keep your existing recovery methods and create passkeys only on devices you control.
What makes a passkey phishing-resistant?
A passkey is tied to the identity of the website or app where it was created. Your browser or operating system helps prevent it from being used to authenticate to a lookalike site, so it does not work like a password that can be tricked out of you by a fake sign-in page. Google for Developers describes passkeys as resistant to phishing because they are bound to a website or app’s identity: Google’s passkey overview.
As an Amazon Associate I earn from qualifying purchases.
A passkey is used with a device unlock method, such as a PIN, fingerprint, or face recognition. This is different from sending a password to a service. However, passkeys are not available everywhere: each website or app must support them.
Free tools Windows power users keep installed
One-click scans. No signup required.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Before you create a passkey
- Choose a personal device. Anyone who can unlock a device may be able to use a passkey saved on it to access the associated account. Google specifically advises creating passkeys only on devices you personally control.
- Keep recovery options. Adding a passkey does not remove existing authentication or recovery factors from a Google Account. Keep recovery methods up to date in case your device is lost, damaged, or unavailable.
- Check device and account requirements. Requirements vary by service and platform. For Google Accounts, the current help page lists Windows 10, macOS Ventura, or ChromeOS 109 and later; Android 9 or iOS 16 and later; or a FIDO2 hardware security key. Listed browsers include Chrome 109+, Safari 16+, Edge 109+, and Firefox 122+. Google also notes that Apple-device users need iCloud Keychain, and that a phone needs a screen lock. Requirements can change; check Google’s current passkey requirements before troubleshooting compatibility.
- Consider account policies. A work or school account may be governed by an administrator. Google Workspace users, for example, may not be able to use a passkey as their only sign-in method.
Shared-device warning: Do not create a Google Account passkey on a shared, borrowed, or publicly accessible device. Google warns that anyone able to unlock the device may be able to access the account. A passkey can also satisfy the second step for accounts using 2-Step Verification or Advanced Protection because it verifies possession of the device; it does not simply replace every other security or recovery factor.
#1 Best Overall
Yubico - YubiKey 5C NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified - Protect Your Online Accounts
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
How to turn on a passkey
- Sign in to the account. Start from the service’s official website or app. Confirm that it supports passkeys.
- Open the security settings. Look for a section named Security, Sign-in, Authentication, or Passkeys. If you do not see the option, use that service’s help page; the feature may not be available for that account or app.
- Choose the passkey control. Select “Create passkey,” “Add a passkey,” or the service’s equivalent. For a Google Account, open Google Account passkey settings.
- Approve the device prompt. Follow the browser or operating-system instructions and unlock the device with its configured screen lock, biometrics, or PIN. Confirm the passkey is listed in the account’s security settings when setup finishes.
- Check where it is saved. Choose or confirm a storage option you can access on the devices you regularly use. For example, Apple uses iCloud Keychain, while Android supports Google Password Manager and other supported credential managers.
- Keep a way back in. Review the account’s recovery methods and, if appropriate, add another passkey on a second personal device or a compatible FIDO2 security key. Do this only if the service supports that device or key.
Choose where your passkey lives
Storage determines which devices can use a passkey and what happens if you lose one. These are provider-specific options, not one universal syncing system.
| Option | Where it is stored and how it can be used | What to consider |
|---|---|---|
| Device passkey | Saved on a particular phone or computer; availability on other devices depends on the platform and service. | Use a device you control and keep account recovery available if it is lost or unavailable. |
| Synced credential-manager passkey | Available on devices supported by the credential manager. Apple says its passkeys sync through iCloud Keychain; Android supports Google Password Manager and other supported managers. Microsoft also describes passkeys synced across devices by Microsoft or another credential manager. | Make sure your regular devices can access the manager you choose. Apple’s iPhone instructions require iCloud Keychain and two-factor authentication: Apple’s passkey security information and iPhone passkey instructions. |
| FIDO2 hardware security key | A compatible external key can be used where the account supports it; Google lists this as one option for creating an Account passkey. | Optional, not a requirement. Verify that the service supports the key and plan how you will sign in if it is lost. Do not assume every service accepts every key. |
For Android setup and supported save locations, see Google’s Android passkey guide. For Microsoft’s explanation of synced passkeys, see Microsoft Support.
Quick Recap
Bestseller No. 2
Bestseller No. 4
Best Value
Thetis FIDO2 Security Key (USB-A, 2-Pack) - Hardware MFA & Passkey Access for Business, School ERP & Employee Accounts | Compatible with Windows, Google Workspace, Apple ID, Coinbase, Salesforce
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
Rank #4
Yubico - Security Key NFC - Basic Compatibility - Multi-Factor Authentication (MFA) Key, Connect via USB-A or NFC, FIDO Certified
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Rank #3
Yubico - YubiKey 5 NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-A or NFC, FIDO Certified - Protect Your Online Accounts
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Rank #2
Yubico - Security Key C NFC - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
What to do if you cannot find the passkey option
- The service may not support passkeys. Check the service’s own security documentation rather than assuming a device setting can turn the feature on for every account.
- Check your device and browser. Confirm that your operating system, browser, screen lock, and credential manager meet that service’s requirements. For Google, use its listed minimum versions above.
- Check the storage account. A passkey saved through a credential manager may not appear if you are using a different account or manager on another device.
- For cross-device sign-in, check Bluetooth. Google advises enabling Bluetooth when using a phone to sign in on another computer.
- Ask an administrator about a managed account. Workplace and school policies can restrict which sign-in methods are available.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
