You can stop relying on text-message codes, but there is no single switch that changes every account. For each service, sign in with your current method, enroll a passkey or FIDO security key in its security settings, add a recovery option, test the new sign-in on another device or browser, and only then remove SMS if the service allows it.
Adding a passkey normally does not delete your phone number or disable text verification. Treat SMS removal as a separate, deliberate step.
As an Amazon Associate I earn from qualifying purchases.
What you are replacing
SMS codes
An SMS code is a one-time number sent to your phone as a sign-in step, commonly after a password. It is familiar and works on almost any phone, but it depends on mobile-network delivery and a phone number that can be targeted, lost, or transferred. Whether an account lets you remove SMS is controlled by that service.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsPasskeys
A passkey is a digital credential created for a particular service and unlocked with your device screen lock, fingerprint, face unlock, or another local unlock method. You do not type the credential into a website. Passkeys are designed to resist phishing because they are bound to the legitimate service and cannot be accidentally entered into a deceptive site.
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
A passkey may be stored only on one device or synchronized by a supported credential manager across devices. The synchronization and recovery behavior belongs to the platform or credential manager, not to SMS.
Security keys
A security key is a separate physical authenticator. A FIDO1 or FIDO2 key can be used as a second step for supported two-step-verification systems. A FIDO2-capable key can also create and hold a passkey on the hardware itself. Check both the account’s supported methods and the connector or wireless capability of your key before buying or enrolling it.
Recovery methods
Recovery is any other route back into an account: another passkey, a second security key, a recovery email or phone, or backup codes when the provider offers them. Removing SMS without establishing recovery can turn a lost phone, damaged computer, or misplaced key into a permanent lockout.
Check support and device requirements first
Passkeys and security keys are account features, not a universal phone setting. Open the provider’s current security, sign-in, or two-step-verification page and confirm that the exact account supports the method you want.
- For a passkey: confirm that the phone, computer, operating system, browser, and credential manager meet the provider’s requirements. Google’s consumer guidance lists Android 9 and later and iOS 16 and later among supported mobile versions, along with supported desktop systems and browser minimums; those requirements are Google-specific and can change.
- For phone-to-computer enrollment: Bluetooth may be required, and the phone must have a screen lock enabled. Keep the phone nearby while the browser displays the pairing prompt.
- For a physical key: verify whether the service accepts FIDO1, FIDO2, or specifically a passkey stored on a FIDO2 key. Check whether your computer or phone has the required USB connector, NFC, or Bluetooth support.
- For recovery: find out whether the account provides backup codes, a recovery contact, or additional authenticators before you remove anything.
If a service does not list passkeys or security keys, do not assume that a key will work. You may need to keep another factor that the service actually supports.
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
The account-by-account migration procedure
Repeat this process separately for every important account. There is no phone-level control that replaces SMS everywhere.
- Open the account’s security settings. Sign in using the existing password and SMS code, authenticator, or other active method. Look for labels such as Passkeys, Sign-in methods, Security keys, or Two-step verification.
- Choose the enrollment option. Select Add passkey to save a credential in the device or credential manager, or select Add security key to register a physical authenticator. Follow the provider’s prompts to approve the device unlock or touch the key.
- Name the credential. If the service asks for a label, use a specific description such as “Personal laptop passkey” or “Spare USB key.” Clear names make later removal safer.
- Add a second route. Register another passkey on a separate device or enroll a second physical key and store it somewhere different. Update the recovery email or phone and generate backup codes if the provider offers them.
- Test the new method. Sign out and sign in again using a separate browser profile, private window, or another device. Confirm that the passkey or key is actually offered and that you can complete the unlock without the old SMS code.
- Review active methods. Return to the security page and read the complete list. Adding a passkey often leaves the password, phone number, backup codes, and other authenticators unchanged.
- Remove SMS only if you intend to. Choose the phone-number or text-message entry and use the provider’s remove or disable control. Some services require another verified factor before allowing this; others may retain a recovery phone even after disabling SMS sign-in.
- Record recovery information. Store backup codes in an offline location such as a password manager with emergency access or a secure printed copy. Do not save the only copy on the device whose passkey you just created.
How to create a passkey
On the device you use every day
- Sign in to the account and open its security or sign-in-methods page.
- Select Add passkey or the equivalent option.
- Approve the browser or operating system prompt to save the credential.
- Unlock the device with its screen lock or biometric method.
- Return to the account’s method list and verify that the new passkey has a recognizable name and recent creation date.
The biometric check happens locally. Google states: “Your biometric data, used for fingerprint or face unlock, stays on your device and is never shared with Google.” The service receives the authentication result, not the fingerprint or face image.
Recommended Free Tools
Using a phone to sign in on a computer
When the computer offers a QR-code or nearby-device passkey flow, keep Bluetooth enabled on both devices if the provider requires it. The phone must have a screen lock. Scan or select the computer prompt, approve the request on the phone, and wait for the browser to finish. If the pairing fails, keep the devices close, unlock the phone first, and check that the browser is one of the provider’s supported versions.
How to enroll a physical security key
- Open the account’s two-step-verification or security-key settings while signed in with an existing method.
- Choose Add security key and select USB, NFC, or Bluetooth when prompted.
- Insert, tap, or pair the key, then touch its sensor if requested. Set a PIN only when the key or account requires one.
- Give the key a label that identifies where it is stored.
- Enroll a second compatible key before removing SMS. Keep the spare in a separate secure location.
- Sign out and test the key on the device or browser you expect to use. Test the spare as well if the account permits it.
A FIDO1 key can satisfy some second-step requirements but cannot necessarily store a passkey. If your goal is a passkey held on the hardware, choose a FIDO2-capable key and verify that the account supports that mode.
Some providers impose a waiting period after adding a new key. Google documents a possible seven-day delay before a newly added security key is available at sign-in. That is a Google-specific rule, not a universal FIDO delay.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Synced passkey or physical key?
| Consideration | Synced passkey | Physical security key |
|---|---|---|
| What it is | A digital credential stored by a supported device or credential manager. | A separate FIDO authenticator that you carry and physically unlock or touch. |
| Convenience | Usually available wherever the same credential-manager ecosystem is supported. | Requires the key to be present and compatible with the device connector or wireless method. |
| Independence from one phone | Depends on the platform’s synchronization and account-recovery model. | Works independently of a particular phone; a spare key can provide redundancy. |
| Loss scenario | Recovery depends on the credential manager and the provider’s account-recovery process. | You can register a second key, but losing the only enrolled key creates friction or lockout. |
| Best fit | People who want fewer objects and already use a supported device ecosystem. | People who travel between systems, want a separate authenticator, or need an offline spare. |
| Required hardware | A supported phone or computer; a hardware key is optional. | A compatible FIDO key plus a supported account and connector or wireless interface. |
Neither option is universally better. Choose based on the accounts you use, the devices you carry, how you recover a lost credential, and whether you can keep a spare.
Free tools Windows power users keep installed
One-click scans. No signup required.
What happens to SMS after you add a passkey?
In most services, nothing happens automatically. The new credential is added alongside existing factors. Google explicitly says that adding a passkey does not change or remove existing authentication or recovery factors. Google sign-in can use the passkey to bypass the second step because the unlocked passkey verifies possession of the device, but the phone number and other methods can remain listed.
To stop receiving verification texts, inspect each account’s active methods and remove or disable SMS yourself. Before doing so, complete a second sign-in test and confirm at least one other recovery route. If the service has no remove control, SMS may be mandatory for that account or retained as recovery; leave it enabled and use the strongest alternative the provider offers.
Google Account details
Google’s passkey setup requires a supported device and browser. Its mobile guidance includes Android 9 or later and iOS 16 or later; desktop operating-system and browser requirements are listed in Google’s current help pages and may change. Phone-to-computer flows can require Bluetooth and a phone screen lock.
After creating the passkey, check Google’s list of sign-in and recovery methods. The passkey does not automatically delete SMS, passwords, backup codes, or other keys. If you add a security key, Google advises having other ways to prove your identity in case that key is lost. A newly added key may take seven days before Google makes it available at sign-in.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Microsoft account and organization changes
Microsoft Entra organizational accounts
Microsoft Learn says passkeys become the default authentication experience for Microsoft Entra organizational accounts beginning September 1, 2026. It also says Microsoft-provided SMS and voice delivery will begin retirement on February 1, 2027, with exceptions for Global Administrators and external users. These dates apply to Entra organizations and should not be treated as a schedule for every Microsoft account. Your administrator’s policy and tenant configuration still control which methods you can register.
Personal Microsoft accounts
Microsoft is separately phasing out SMS for authentication and recovery on personal accounts and describes passkeys and verified email as alternatives. The personal-account rollout is separate from the Entra schedule. Use the live personal-account security page to see what your account currently permits before deleting a phone number.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Recovery planning and lost-key procedures
Before removing SMS
- Enroll a second passkey on a different device, or a second physical key.
- Confirm that your recovery email and phone are current and accessible.
- Generate backup codes where offered and store them away from your primary device.
- Perform a real sign-out test, not just a check that the credential appears in a settings list.
- Write down the account’s recovery URL or support path while you are still signed in.
If you lose a security key
- Use your spare key, another passkey, backup code, or recovery contact to sign in.
- Open the account’s security settings and revoke the missing key immediately.
- Review recent sign-ins and change the account password if the provider recommends it or if the key may have been compromised.
- Enroll a replacement key and test it before relying on it.
A lost key is not automatically a stolen account: a FIDO key normally also requires the account’s registration and, depending on the model and service, a touch or PIN. The urgent action is to remove the missing authenticator from every account where it was enrolled.
Troubleshooting common failures
The passkey option is missing
Verify that you are in the account’s current security settings, not an old help page or a basic profile page. Check the provider’s support list, update the operating system and browser, and confirm that the account type is eligible. Enterprise administrators can disable or restrict passkeys.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11The phone cannot pair with the computer
Enable Bluetooth if the provider’s flow uses it, turn on the phone’s screen lock, keep both devices nearby, and retry from a supported browser. Corporate browser policies, private-network restrictions, or a disabled credential manager can also block the prompt.
Best Value
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
The security key is not detected
Try the connector or wireless mode specified by the account, remove USB hubs, and confirm that the key is FIDO-compatible rather than a generic USB storage device. If the service accepts only FIDO2 passkeys, a FIDO1-only key will not meet that requirement.
SMS is still being requested
Adding a passkey does not necessarily remove other factors. Check whether you are signing in to the same account, whether the passkey is being offered as the first step, and whether an organization policy requires SMS for certain actions. Remove the phone method only through the provider’s settings and only after another recovery route works.
You are locked out after removing SMS
Stop retrying random methods. Use the provider’s documented account-recovery process, a previously enrolled passkey or spare key, or saved backup codes. Recovery times and identity checks differ by service; support cannot always bypass them.
A practical checklist for each account
- Passkey or security-key support confirmed for this exact account.
- Device, browser, Bluetooth, screen-lock, and connector requirements met.
- New credential enrolled and clearly labeled.
- Second passkey or spare key registered where practical.
- Recovery contact information updated.
- Backup codes generated and stored securely.
- Sign-out test completed on another browser or device.
- SMS removed only after the new sign-in and recovery routes work.
- Missing or old authenticators revoked from the account’s method list.
Work through the checklist one service at a time. A passkey or security key improves the sign-in method only when it is supported by the account and backed by a recovery plan you can actually use.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
