A passkey is a password replacement: a cryptographic credential that lets you sign in to a specific website or app by unlocking a phone, computer, or security key. Your device proves you have the credential; the site does not receive your fingerprint, face scan, or PIN.
What a passkey is
A passkey is a FIDO credential associated with the account where you create it. It uses a pair of cryptographic keys: the service stores a public key, while the private key stays with your authenticator, such as a phone or computer. At sign-in, the service asks the authenticator to prove it holds the corresponding private key.
As an Amazon Associate I earn from qualifying purchases.
The FIDO Alliance calls passkeys “a password replacement technology.” Unlike a password typed into a site, a passkey is not a shared secret that you need to remember or send to the service.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →What signing in with a passkey looks like
-
Choose the passkey sign-in option on a website or app that supports it.
#1 Best Overall
Yubico - YubiKey 5C NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified - Protect Your Online Accounts- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
-
Your device or passkey provider finds the credential registered for that account.
-
Approve the sign-in by unlocking locally, for example with a biometric or device PIN.
Rank #2
Yubico - Security Key C NFC - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
-
The authenticator uses the private key to provide proof to the service. The service checks that proof against its public key.
Recommended: Fix Windows Errors and Clear Junk Files in Minutes - Free Scan →Recommended: Crashes or Glitches? A Free Driver Scan Usually Finds the Culprit →Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
FIDO2 is the common name for WebAuthn and CTAP used together. Websites use the WebAuthn browser API; apps use platform FIDO APIs. CTAP supports communication with authenticators, including a nearby phone used to sign in on another device. The precise prompts and steps vary by operating system, browser, app, and service. FIDO User Authentication Specifications
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Why passkeys resist ordinary phishing
A passkey is tied to the identity of the website or app for which it was created. A lookalike site should not be able to request the legitimate site’s credential, which is why FIDO, Apple, and Google describe passkeys as phishing-resistant. FIDO says passkeys “are resistant to phishing, are always strong, and are designed so that there are no shared secrets.” FIDO Alliance Passkeys FAQ
This protection applies to the credential-presentation step; it does not eliminate every account risk. Device compromise, account recovery, and the service’s own security still matter. A successful local biometric check also does not send your biometric to the website: the service receives confirmation that local verification succeeded, not your face or fingerprint. Apple’s Passkeys Overview and Google’s passkey documentation
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Synced and device-bound passkeys
Passkeys come in two practical forms. A synced passkey is made available on your other devices through a provider ecosystem. A device-bound passkey stays on one device or security key rather than syncing. That choice affects convenience, control, and what you need to do if a device is lost.
Free tools Windows power users keep installed
One-click scans. No signup required.
| Type | How it works | What to consider |
|---|---|---|
| Synced | Backed up and made available on other devices through a passkey provider. Google says its passkeys are encrypted on-device before syncing. | Easier to use when adding or replacing devices; recovery still depends on your provider and the service’s account-recovery options. |
| Device-bound | Remains tied to one device or security key instead of syncing. | Can meet a strict device-boundary requirement, but losing access to the device can mean losing that credential. Microsoft Entra recommends this type when strict device-boundary control is required. |
Sources: FIDO Alliance Passkeys FAQ, Google, and Microsoft Entra passkey FAQs.
Best Value
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
Using a phone or security key with another device
You do not have to create a separate passkey on every device to sign in. A nearby phone or security key may be usable as the authenticator while you sign in on a different computer. FIDO describes cross-device sign-in using CTAP, with Bluetooth Low Energy used to verify physical proximity. Availability and the exact flow depend on the operating system, browser, and service.
Plan recovery before you need it
Before relying on a device-bound passkey, check the account’s security settings for options to add another passkey or recovery method. A separate FIDO2 security key can serve as another device-bound credential and may help if you lose access to devices holding synced passkeys. It is optional—phones and computers can also provide passkey authentication—and no key is guaranteed to work with every account or device. Confirm compatibility with the service and your equipment before relying on it. FIDO Alliance Passkeys FAQ
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitches
