Passkeys on Your Phone: The Password Shortcut With One Important Catch

A person using a smartphone beside a laptop.

Written by

in

A passkey lets you sign in using your phone’s screen lock—such as a fingerprint, face check or PIN—instead of typing a password for every login. For services that support them, passkeys are designed to resist phishing: the sign-in is tied to the legitimate site or app rather than a password that can be copied into a fake page.

What a passkey actually changes

For a Google Account, you can create a passkey in your account’s sign-in settings, then follow the prompts on your personal device. Your biometric data stays on the device; Google says it is not shared with Google. A passkey does not magically protect an already-unlocked phone, and it does not remove every existing sign-in or account recovery method.

The important catch: Google warns that anyone who can unlock your device may be able to access your Google Account using a passkey on it. Do not create one on a borrowed or shared device. Use a strong screen-lock PIN or password, keep the phone physically secure and check which devices have access to your account.

Set it up without locking yourself out

  1. Update your phone and browser, then confirm your screen lock is enabled.
  2. Open your account’s official security or passkey settings—not a link in an unexpected email or message.
  3. Choose to create a passkey on a device you personally control and follow its on-screen verification.
  4. Keep account recovery options current and make sure you can access a second trusted device or recovery method.

Passkeys can sync through an ecosystem account or be stored in a password manager, depending on the platform. The exact experience differs across Android, iPhone, browsers and services. If you use a work or school account, its administrator may limit passkey sign-in.

Bottom line: Passkeys can be a convenient, phishing-resistant sign-in option—not a reason to share your phone unlock code. Start with one important account, verify recovery, and only enroll devices you trust.

Official guide

Google Account Help: Sign in with a passkey instead of a password

Featured image credit: Alejandro Escamilla via Wikimedia Commons, CC0. Image source and license.

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *