Understand passkeys before using one
Learn where a passkey lives, how it signs you in and how to recover access after losing a device.
Follow the method ↓
The answer in 30 seconds
A passkey uses a cryptographic key pair associated with a specific website. Your device or manager keeps the private part; a local screen lock authorises its use. The available storage and recovery options differ by ecosystem.
Try a passkey on a recoverable account. Identify its storage location, test a new sign-in and inspect the account's remaining sign-in and recovery methods before relying on it.
Examples to adapt
Check whether it will be stored on the device, in a synced manager or on a security key.
Find out whether another approved device or account recovery process can restore access.
A passkey is bound to a domain, but the false page could still request other information.
Follow the method
- 1Open the real service
Go directly to a known account address and find its security settings.
- 2Choose where to store it
Read whether the passkey is device-bound or synchronised, and how that storage is protected.
- 3Create and test it
Complete setup, sign out and sign back in from the expected device.
- 4Prepare for device loss
Check backup devices, recovery routes and whether the provider offers another sign-in method.
- 5Review older methods
Do not assume that creating a passkey automatically disables passwords or other recovery routes.
A checklist to keep
Use these checks to record what you found. The grid supports a decision; it does not make one for you.
| Check | What to examine | Action |
|---|---|---|
| Service | Is this the official account? | Confirm |
| Storage | Where is the passkey saved? | Record |
| Access | Does a fresh sign-in work? | Test |
| Loss | What if this device disappears? | Prepare |
| Fallback | Which other methods remain? | Review |
Free, no sign-up. UTF-8 text with semicolon-separated columns.
What to check
A passkey does not secure an unlocked device by itself.
Local biometrics authorise the key; the website does not receive your fingerprint.
A synced passkey and a hardware security key have different recovery models.
Common questions
Is a passkey a phone PIN?
No. The PIN or biometric unlock authorises your device to use a stored cryptographic key.
Can I still use a password?
That depends on the service. Inspect its settings after passkey creation.
Sources and documentation
Documentation consulted on . Examples are illustrative; interfaces and results may change.