Passkey: how to log in without a password

When logging in password you enter a secret known to you. When logging in passkey, the device confirms having a key assigned to a given service. You approve its use with a fingerprint, face or device lock code.

The site does not get your fingerprint or PIN code. Checking is done on the device side. The service receives cryptographic login confirmation.

What changes in everyday use?

Instead of rewriting the password and code from the SMS, you can approve one login window. The key is related to the proper site, so a similar-looking domain will not receive the same confirmation. This is an important advantage over a one-time code that can be copied on a fake page.

This does not mean that the device can remain unprotected. A person who can unlock it can be given the ability to use the keys saved. Create passkeys on the equipment you control, and take care of its lock.

Where will the key be saved?

Note the supplier's name in the save window. Passkey can go to a system manager, a separate password manager or a hardware key.

Synchronized Key may be available on other devices after logging in to the same supplier. Key related to the device it remains on a specific device. Do not guess based on the look of the button — check in the documentation you create.

Practical example: if you save passkey on a USB key, just logging into a cloud account on your new laptop will not move it there. You need a physical key or another registered method.

Add first passkey

1. Enter the account security settings. Seek “Access Keys”, “Passkeys” or “Add login method”.
2. Select the creation of the key and read where it will be saved. Approve the operation on your own device.
3. If the service allows, give the key a name, such as “Private Laptop”. This will make it easier to remove the correct entry later.
4. Leave the current session open. In the new window, select passkey login and check if you are in the right account.

If the service does not offer this option, it cannot be added by the browser itself. Use the 2FA method available and return to passkeys when the service implements it.

Can I delete my password now?

This depends on the service. In part of passkey services is an additional method, in others you can go to an account without a password. First check login and recovery. Simply adding the key does not invalidate the old password, session or other methods of access.

Before you finish, set how you will enter your account without the current device. A second passkey or hardware key registered separately is useful. You can find a description of this script in the guidebook recovery of access from passkey.