To use a passkey, open a supported account’s security settings, choose the option to create or save a passkey, then approve it with your device’s PIN, fingerprint, face recognition, or other screen-unlock method. The passkey is stored in a credential manager or on a specific device; you use it to sign in without typing a password.
What a passkey does
A passkey is a cryptographic credential created for a particular service, not a password you invent or memorize. It uses a public-private key pair: the service stores the public key, while your authenticator uses the private key to prove that you can sign in. Apple Support explains that the private key is not sent to the service and describes passkeys as highly resistant to phishing because they are associated with the service for which they were created: About the security of passkeys (published September 16, 2024).
As an Amazon Associate I earn from qualifying purchases.
The fingerprint, face scan, PIN, or device passcode unlocks the authenticator locally; it is not itself the passkey. The FIDO Alliance describes this local check as user verification and uses “passkey” as a cross-platform term: FIDO Alliance UX Guidelines for Passkey Creation and Sign-ins.
Free tools Windows power users keep installed
One-click scans. No signup required.
How to create and use a passkey
- Sign in to a service that supports passkeys, or open its account security or sign-in settings.
- Select an option such as “Create a passkey” or “Save a passkey.” The exact wording varies by service.
- If prompted, choose where to save it. Options may include a synced credential manager, the device you are using, a phone paired by QR code, Windows Hello, or a FIDO2 security key.
- Approve the prompt with the device’s screen lock, PIN, fingerprint, or face authentication.
- Check the service’s security settings or your chosen credential manager to confirm the passkey was added.
Follow the prompts on your screen because the steps and available storage options depend on the service, device, browser, and operating system. Google’s instructions cover personal Google Accounts and list current platform and browser requirements, including Windows 10, macOS Ventura, ChromeOS 109 or newer, Android 9, and iOS 16; browser minimums include Chrome 109, Safari 16, Edge 109, and Firefox 122. Requirements can change, so check the Google Account Help passkey instructions and update your software. To sign in on a computer using a phone, Google says Bluetooth must be enabled; the flow uses a QR code and device pairing.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Microsoft lists a credential manager, phone or tablet, security key, and Windows Hello among the places a passkey can be saved. A phone setup may use QR scanning and Bluetooth pairing. Work or school account enrollment depends on the organization’s support and policy. See Microsoft’s instructions for creating and saving a passkey.
For passkeys saved with iCloud Keychain on iPhone, Apple requires iCloud Keychain and two-factor authentication to be enabled. The prompts still vary by app, website, browser, and operating system; Apple’s passkey security guidance explains its implementation.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Choose where the passkey is stored
The main choice is between a passkey that syncs through a provider across your devices and one tied to a particular authenticator. Which works best depends on the service and operating systems you use, how you expect to recover access, and whether you need a tighter device boundary.
| Storage choice | Access on other devices | Recovery and management considerations |
|---|---|---|
| Synced credential manager | Can make passkeys available on other devices through the same provider ecosystem. | Convenient if you use multiple devices, but access depends on your manager account and its recovery and management controls. FIDO Alliance guidance advises high-assurance services to consider the sync provider’s security and management or export controls. |
| Device-bound authenticator | Generally tied to one authenticator rather than synced to other devices. | May suit someone seeking a tighter device boundary, but requires planning for loss, replacement, or access to another authenticator. |
FIDO Alliance guidance says synced passkeys can improve consumer usability and help restore access on another device; it does not make them inherently unsafe or device-bound credentials universally better. For everyday use, a credential manager compatible with your devices can be practical—make sure you understand how to recover that manager account. If you need a device-bound approach, review the service’s requirements and plan how you will manage replacement or loss. See FIDO Alliance guidance on synced passkey deployment.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Use a phone or a security key
You do not need to buy a physical key to get started if your supported phone or computer meets the service’s requirements. Some services let you use a phone to approve a sign-in on another device by scanning a QR code and pairing over Bluetooth.
A FIDO2 hardware security key is an optional physical authenticator for services that support it. Microsoft and Google list security keys among their passkey options, and FIDO Alliance UX guidance discusses device-bound passkeys on physical keys. Before choosing one, check that the service supports security-key passkeys and that the key’s connector or wireless options work with your devices.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Protect access and plan for device loss
- Set up recovery before relying on a passkey. Know which credential manager holds it and how you would regain access to that manager account.
- Create passkeys only on devices you personally own and use. Google warns that anyone who can unlock a device holding the passkey may be able to access the account. Avoid shared or public devices.
- Keep an alternative sign-in method where available. A passkey does not mean a service has removed passwords or other recovery methods. Google says users can still sign in with a password after enrolling a passkey.
- Remove credentials from lost or shared devices. Use the account’s security settings and the credential manager’s controls to remove passkeys you no longer want associated with a device. Google documents removing a lost-device passkey while retaining traditional recovery options.
Recovery differs by provider. Apple says iCloud Keychain passkeys are end-to-end encrypted and describes recovery protections that include Apple Account authentication, a trusted phone number, and a device passcode; it also recommends setting an account recovery contact. These are details of Apple’s implementation, not a universal recovery process for every passkey provider.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →On Windows 11 version 24H2, applications must receive privacy consent to access passkeys. You can manage app access under Settings > Privacy & security > Passkey access. Microsoft documents this in Support for Passkeys in Windows.
Best Value
- The information below is per-pack only
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
What passkeys do not guarantee
Creating a passkey does not necessarily remove your account password or other recovery options; the service decides which methods remain available. Organizations can also limit passkey use through their support or policies. Treat the passkey as one sign-in method, and check the account’s security settings for the fallback and recovery choices that actually apply to you.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
