How to Create and Use Passkeys on Android, iPhone, Windows and Mac

Passwords are easy to forget, reuse and accidentally hand over to a phishing website. Passkeys offer a simpler alternative: you sign in by unlocking a trusted device with your fingerprint, face, screen lock or PIN.

You can already use passkeys with many popular websites and apps. The setup, however, can look different depending on whether you use Android, an iPhone, Windows or a Mac. This guide explains how to create a passkey, where it is stored, how to use it on the same or another device, and what to do before replacing or losing a device.

What Is a Passkey?

A passkey is a digital sign-in credential that replaces—or sometimes works alongside—a password. It is created for a specific account on a specific website or app.

Behind the scenes, a passkey uses a pair of cryptographic keys:

• A public key is registered with the website or app.

• A private key remains protected by your device or passkey provider.

When you sign in, the website sends a challenge that can be completed only with the matching private key. You approve the request by unlocking your device with a fingerprint, face scan, pattern or PIN. Your biometric information is used locally to unlock the credential; it is not sent to the website.

This design makes passkeys resistant to ordinary phishing. A passkey is linked to the genuine website or app for which it was created, so it cannot simply be typed into an imitation login page. Apple provides a useful technical overview in its guide to passkey security, while Google describes passkeys as a passwordless sign-in standard that works across supported browsers and operating systems in its developer documentation.

What You Need Before Creating a Passkey

Before you begin, check the following:

1. The website or app supports passkeys. You cannot force passkey support on a service that has not implemented it.

2. Your device and browser are updated. Older operating systems or browsers may offer limited passkey support.

3. A screen lock is enabled. Set up a PIN, pattern, fingerprint, Face ID, Touch ID or Windows Hello, depending on your device.

4. Your preferred credential manager is ready. Examples include Google Password Manager, Apple Passwords with iCloud Keychain, Microsoft Password Manager and supported third-party password managers.

5. Your recovery information is current. Keep a verified email address, recovery number or another sign-in method available in case you lose access to a device.

One crucial point: you normally create a passkey from the security or sign-in settings of a supported account, not from one universal “create passkey” button in your phone or computer settings.

How to Create and Use Passkeys on Android

On Android, passkeys are commonly saved in Google Password Manager, although supported third-party credential managers may also be available. Saved passkeys can be used across compatible devices where you are signed in to the relevant provider.

Create a passkey on Android

The wording varies by service, but the usual process is:

1. Open a supported app or website in Chrome.

2. Sign in using your existing password or another approved method.

3. Open the account's Security, Sign-in or Login settings.

4. Select Create a passkey, Add passkey or a similar option.

5. Choose where to save the passkey if Android presents more than one provider.

6. Confirm the request with your fingerprint, face, pattern or screen-lock PIN.

7. Give the passkey a recognizable name if the service requests one.

For a Google Account specifically, Google directs users to its Passkeys and security keys page, where they can select Create a passkey and follow the prompts. Google's official passkey sign-in guide contains the latest account-specific instructions.

Use a passkey on Android

1. Open the supported app or website.

2. Select Sign in with a passkey, or tap the account field and choose the suggested account.

3. Select the correct passkey if more than one appears.

4. Verify your identity with your fingerprint, face, pattern or PIN.

If Chrome does not offer the passkey automatically, touch and hold the username or password field and look for Select passkey or Use passkey. Google documents this manual option in its Chrome passkey troubleshooting guidance.

Manage Android passkeys

Open Google Password Manager from your Android settings or Chrome, select the relevant account or website, and authenticate to view its details. The exact path can differ by phone manufacturer and Android version.

Deleting a saved passkey from your device or credential manager may not remove it from the website's account settings. For complete removal, check both locations.

How to Create and Use Passkeys on iPhone

On an iPhone, passkeys can be stored in the Passwords app and synchronized through iCloud Keychain to other Apple devices signed in to the same Apple Account. Supported third-party password managers may also be used when configured as credential providers.

Turn on iCloud Passwords and Keychain

For Apple's built-in syncing:

1. Open Settings.

2. Tap your name, then iCloud.

3. Under Saved to iCloud, tap Passwords.

4. Turn on Sync this iPhone.

Apple maintains the current steps in its iCloud Keychain setup guide.

Create a passkey on iPhone

1. Open a supported website in Safari or open its iPhone app.

2. Sign in to your account using its current method.

3. Visit the account's security or sign-in settings.

4. Tap Create a passkey, Add passkey or the equivalent option.

5. Approve the request with Face ID, Touch ID or your iPhone passcode.

6. The passkey is saved to your selected credential provider.

Use a passkey on iPhone

1. Open the website or app and go to its sign-in page.

2. Tap the account-name field or choose Sign in with a passkey.

3. Select the suggested account.

4. Authenticate with Face ID, Touch ID or your passcode.

Apple's iPhone passkey guide notes that the precise wording can vary between websites, apps and browsers.

View or delete passkeys on iPhone

1. Open the Passwords app.

2. Unlock it with Face ID, Touch ID or your passcode.

3. Select the website or app.

4. Review the credential or choose the option to delete the passkey.

Before deleting it, confirm that you still have another working sign-in or recovery method.

How to Create and Use Passkeys on Windows

Windows 11 provides the latest built-in passkey features and uses Windows Hello—your face, fingerprint or device PIN—to authorize passkey use. Depending on your setup, a passkey may be saved locally to the Windows device or through a supported credential manager.

Set up Windows Hello first

1. Open Settings.

2. Select Accounts > Sign-in options.

3. Set up facial recognition, fingerprint recognition or a PIN under Ways to sign in.

Microsoft's Windows Hello guide explains the available options.

Create a passkey on Windows 11

1. Open a supported website in Edge, Chrome or another compatible browser.

2. Sign in with your existing method.

3. Open the account's security or sign-in settings.

4. Select Create a passkey or Add passkey.

5. When Windows asks where to save it, choose your Windows device or preferred credential manager.

6. Approve the request with Windows Hello.

In Microsoft Edge, you can also manage automatic passkey upgrades by opening Settings > Passwords and autofill > Microsoft Password Manager > More settings. Microsoft's create and save a passkey guide explains this feature.

Use a passkey on Windows

1. Visit the website's login page.

2. Choose Sign in with a passkey.

3. Select a passkey from the available device or credential manager.

4. Complete the Windows Hello prompt.

If the passkey is stored on your phone, choose an option such as Use another device or Passkey from a nearby device. Scan the displayed QR code with the phone that holds the passkey, keep Bluetooth enabled when requested, and approve the sign-in on your phone.

View or delete passkeys saved to Windows

1. Open Settings.

2. Select Accounts > Passkeys.

3. Find the relevant passkey.

4. Use the menu beside it to delete the device-bound credential.

Under Accounts > Passkeys > Advanced options, compatible versions of Windows 11 may let you enable or disable available passkey services. See Microsoft's current passkey management instructions.

How to Create and Use Passkeys on Mac

On a Mac, Apple's Passwords app can store passkeys and sync them through iCloud Keychain. You can authorize sign-in using Touch ID or your Mac login password, depending on your hardware and configuration.

Prepare your Mac

Make sure iCloud Keychain is enabled and your Mac is updated. If your Mac supports Touch ID, configure it for a quicker sign-in experience.

Create a passkey on Mac

1. Open a supported website in Safari or another compatible browser.

2. Sign in using the account's existing method.

3. Go to its security or sign-in settings.

4. Click Create a passkey or Add passkey.

5. Choose your credential provider if prompted.

6. Confirm with Touch ID or your Mac user password.

Use a passkey on Mac

1. Visit the account's sign-in page.

2. Click the account-name field or Sign in with a passkey.

3. Select the relevant account.

4. Use Touch ID or follow the authentication prompt.

If you want to use a passkey stored on an iPhone or iPad, choose Other Options and then Passkey from nearby device. Scan the QR code and approve the request on the Apple device. Apple describes this flow in its Mac passkey sign-in guide.

View or delete passkeys on Mac

On a recent macOS version:

1. Open the Passwords app.

2. Unlock it with Touch ID or your user password.

3. Select the account.

4. Review its details or select Delete Passkey.

On some earlier macOS versions, passkeys are available under System Settings > Passwords or Safari's password settings. Apple's Mac password and passkey guide lists the current paths.

How to Use a Passkey Across Different Devices

There are two common ways to use passkeys across devices.

1. Synced passkeys

A credential provider can securely synchronize passkeys between compatible devices signed in to the same account. For example, iCloud Keychain can make a saved passkey available on a user's Apple devices, while Google Password Manager can make passkeys available across supported Android and Chrome environments.

Syncing is provider-dependent. Do not assume that every passkey will automatically appear across unrelated ecosystems or credential managers.

2. Nearby-device sign-in

If the passkey is on your phone but you are signing in on a computer:

1. Choose Use another device, Passkey from nearby device or similar wording.

2. Display the QR code on the computer.

3. Scan it with the phone's camera.

4. Confirm that the website shown on the phone is correct.

5. Approve with your phone's biometric authentication or screen lock.

Keep the phone and computer close together and turn on Bluetooth if requested. Proximity checks help confirm that the person approving the request is near the device attempting to sign in.

Passkey Safety Tips

• Create passkeys only on devices you own or control. A passkey on a shared device could remain available after you sign out of the website.

• Protect every device with a strong screen-lock PIN. Avoid easily guessed codes.

• Keep recovery details updated. A passkey improves sign-in security, but account recovery is still controlled by each service.

• Register more than one secure sign-in option when allowed. A second device or hardware security key can reduce the risk of lockout.

• Check the domain before approving a cross-device request. Passkeys resist phishing, but you should still verify what you are authorizing.

• Remove lost or sold devices from your accounts. Also review the affected website's passkey list and delete credentials you no longer use.

• Do not delete your final working credential prematurely. Test the new passkey or recovery method first.

Common Passkey Problems and Fixes

The website does not show a passkey option

The service may not support passkeys yet, or the feature may be limited by account type, region, browser or administrator policy. Update the app and browser, then check the account's security settings.

The passkey exists but is not suggested

Confirm that the correct credential provider is enabled and that you are signed in to it. Try selecting Sign in another way or manually choosing the passkey option.

The QR-code sign-in does not work

Keep both devices nearby, enable Bluetooth, check their internet connections and make sure the phone is using the credential provider that contains the passkey.

A passkey stopped working after changing the device PIN or biometrics

Use another approved sign-in method, create a new passkey, test it, and then remove the invalid credential. Microsoft recommends setting up a new passkey before deleting one that no longer works in its passkey troubleshooting guide.

You lost the device containing the passkey

Try a synced passkey on another trusted device or use the website's recovery process. Once you regain access, remove the missing device and its passkey from the relevant account, then register a replacement. If the passkey was synced through a credential provider, secure that provider account as well.

Frequently Asked Questions

Can I use the same passkey on Android, iPhone, Windows and Mac?

You may be able to use a synced passkey across compatible devices connected to the same credential provider. Otherwise, use nearby-device sign-in or create an additional passkey for the same account. Cross-platform availability depends on the website, operating system, browser and passkey provider.

Do passkeys replace passwords completely?

Not always. Some services let a passkey replace the password during everyday sign-in but retain a password or recovery method in the background. Others support genuinely passwordless accounts. The website or app decides which options remain available.

Are fingerprints and Face ID sent to the website?

No. Biometric authentication normally unlocks the passkey locally on your device. The website receives cryptographic proof, not a copy of your fingerprint or face data.

Can someone use my passkey if they steal my phone?

They would generally still need to unlock the phone or approve the passkey with its screen-lock method. Use a strong device PIN, enable remote-device protection, and remove a lost phone from your accounts as soon as possible.

Can I create more than one passkey for an account?

Many services allow multiple passkeys so you can register more than one device or security key. Availability and limits depend on the service.

Where are passkeys stored?

Passkeys may be stored locally on a device, in a platform credential manager such as Google Password Manager or Apple Passwords, in Microsoft Password Manager, in a supported third-party password manager, or on a FIDO2 hardware security key.

Should I delete my password after creating a passkey?

Only if the service officially offers a passwordless-account option and you have reliable recovery methods. Creating a passkey does not automatically mean every legacy device or app can function without the password.

Final Thoughts

Passkeys make secure sign-in feel more familiar: instead of remembering and typing a secret, you approve access by unlocking a trusted device. Android, iPhone, Windows and Mac all support this approach, but the storage and syncing experience depends on the credential provider you choose.

Start with one important account, create the passkey from its security settings, and test it before changing any existing sign-in method. Once you understand where your passkeys are stored and how account recovery works, expanding passkey use across your other accounts becomes straightforward.