Skip to content
plainly.
Security / guide

What passkeys are and why you'll start seeing them everywhere

A passkey lets you sign in with a device you already use. Here is the plain-English version before you set one up.

3 min read
The Plainly version

Use the screen lock you know to sign in to a site.

Technology, explained plainly. ↗

A website asks if you want to create a passkey. It sounds technical, but the experience is familiar: you approve with the same fingerprint, face scan, or PIN you use to unlock your device. The site does not need you to invent another password.

Behind the scenes, the site keeps one part of a matched pair and your device or credential manager keeps the other. Your secret part is not typed into the site. This design helps protect against fake sign-in pages that try to steal passwords.

Before you tap Create

Make sure you are on the real app or website, reached through your own bookmark or by typing its address. Follow its instructions to choose where the passkey will be saved. Depending on your device and settings, it might sync through a credential manager or stay on one device.

If you switch phones or lose a device, how you regain access depends on where the passkey was saved and the site's recovery process. Check that you can still reach your recovery email or backup method. It is worth understanding this before you depend on one device for a key account.

A simple first try

Try it on a service you already trust when the option appears in that service's account settings. Sign out and back in once while your usual device is nearby. If the steps are unclear, keep your existing method until you understand where the passkey will live.

The best sign-in method is one you can use and recover safely. There is no prize for changing every account in one afternoon.

Worth passing on?

Keep reading

More to explore

Stay curious.
Stay clear.

There is more to understand. Pick up with another story or browse by topic.