Losing a device does not always mean losing your passkeys. First identify where each passkey is stored: a synced passkey may return when you sign in to the same credential manager on a supported replacement device, while a device-bound passkey stays on the lost device. If you also cannot access the provider account, recover that account separately. Then use another registered sign-in method or the recovery process for each affected website or app.
Start by identifying what was lost
- List the affected accounts. Note which websites, apps, work accounts, and important services used passkeys.
- Identify the passkey provider. It may be iCloud Keychain, Google Password Manager, Microsoft Password Manager, a browser or operating-system provider, or a third-party credential manager. Do not assume every passkey on one device was stored in the same place.
- Work out whether each passkey was synced or device-bound. Providers can sync passkeys to other devices through the same account. Device-bound passkeys are stored only on the device where they were created. FIDO Alliance explains how passkey providers and syncing work; Microsoft also describes the distinction in its passkey overview.
Recover access in the right order
1. Recover the provider account if you cannot sign in to it
Follow the provider’s official account-recovery instructions. A synced passkey cannot be assumed available until you can access the provider account and set it up on a supported device. Recovering that provider account is separate from recovering your login to a particular website or app. FIDO Alliance notes that loss of access to the provider can prevent restoration of synced passkeys; its 2024 consumer-use guidance discusses this and other recovery limitations.
As an Amazon Associate I earn from qualifying purchases.
2. Restore synced passkeys on a replacement device
Set up the same credential manager or provider on the replacement device and sign in to the same account. Check whether the needed passkeys appear, then test sign-in to the relevant services. Microsoft says passkeys stored in a synced credential manager may become available when the user signs into that manager on a new device; they may not need to be added again. Availability depends on the provider, device, and service.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →3. Use another route for device-bound passkeys
A device-bound passkey remains on the device where it was created, so losing that device also loses that passkey. Try another passkey already registered to the account, a separately registered security key, or the service’s account-recovery process. A cross-device sign-in can help only while the device holding the passkey is still available; it does not retrieve a passkey from a device that is gone. If no alternative works, follow the recovery process for each affected service.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
4. Secure accounts if the device was stolen
After regaining access, review the affected account’s security settings. Where the service offers the controls, remove passkeys or sessions associated with the lost device and review recovery methods. If the provider account may also be compromised, secure it as well. Exact controls and sign-out behavior vary by service.
5. Replace credentials that no longer apply
Add a new passkey on the replacement device or in a supported manager. Microsoft advises adding a replacement passkey and then removing old passkeys that no longer apply. For work or school accounts, contact your IT administrator: organizational policies may restrict available methods.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Apple iCloud Keychain recovery has specific requirements
Apple says iCloud Keychain passkeys sync across a user’s devices and may be recoverable even if all associated devices are lost. Its documented recovery requires Apple Account authentication, a code sent to the registered trusted phone number, and the device passcode. Apple also documents a limit of ten authentication attempts for this recovery step: after several failed attempts, the escrow record is locked and the user must contact Apple Support for more attempts; after the tenth failed attempt, the record is destroyed. These are Apple-specific instructions and limits, not a general passkey recovery process. Follow Apple’s current guidance on the security of passkeys, which also describes an account recovery contact.
Plan a backup before the next device loss
A backup only helps if it is registered with the account before the primary device is lost. FIDO Alliance’s 2024 consumer-use guidance puts the responsibility plainly: “On the other hand, if the user chooses to use device-bound passkeys, the user is responsible for ensuring they have backup authenticators available.”
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
- Register more than one usable sign-in route. Depending on the account and your security needs, this could be a second passkey on another device, a synced credential manager, or a separately registered FIDO2 hardware security key.
- Store physical backups separately. A hardware key must be registered with each account that supports it; owning one does not automatically make it a backup for your accounts. Compatibility varies by service and device.
- Test the backup. Confirm that each additional method works before relying on it, and keep provider-account recovery options current.
Synced passkeys reduce dependence on any single device, but they still rely on access to the provider account, compatible devices, and the account’s available recovery routes. Some organizations may prefer device-bound credentials for their security requirements, which makes backup planning especially important. Microsoft Entra’s documentation describes its enterprise context, including passkey FAQs and passkey (FIDO2) authentication.
Quick Recap
Best Value
- POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
