What Is a Passkey and Will It Replace SMS Codes?

A passkey lets you sign in with your fingerprint, face or screen lock instead of a password and code. It resists phishing and replaces SMS codes.

How it works

When you create a passkey, your device makes a pair of keys. The site keeps one, your device keeps the other and unlocks it with your fingerprint, face or PIN. Nothing reusable is typed, so there is nothing for a fake site to steal.

Benefits

• No password to remember or leak.
• No waiting for a text code.
• Works only on the real site, which stops most phishing.

Setting one up

1. Open the account's security settings.
2. Choose Create a passkey.
3. Confirm with your fingerprint, face or screen lock.

Keep a phone number?

Many services still use your number for recovery. Keep it current and add a recovery email too. See why add a recovery email.

Passkeys on several devices

Passkeys stored in your phone's password manager usually sync to your other devices signed in to the same account. On a shared computer, you can sign in by scanning a QR code with your phone instead.

FAQ

What is a passkey?

A way to sign in with your device's lock instead of a password.

Is a passkey safer than SMS codes?

Yes, it resists phishing and SIM swaps.

What if I lose my phone?

Passkeys usually sync through your password manager or phone account. Keep a recovery method too.

Related: SMS vs app codes · authenticator apps · recovery email.