# Passkeys: The Password-Free Way to Sign In

Passkeys let you sign in with your fingerprint or face instead of a password, and they're resistant to phishing by design. Here's how they work and how to start using them.

A **passkey[↗](/passkey)** is a modern sign-in method that replaces your password entirely. Instead of typing something you know, you prove who you are with something you have (your phone or computer) and something you are (your fingerprint or face), the same way you already unlock your device.

 
## Why passkeys are more secure than passwords
 Passkeys are built on public-key cryptography[↗](/public-key-cryptography). When you set one up, your device creates a matching pair of keys: a private key that never leaves your device, and a public key that's stored with the website. To sign in, your device proves it holds the private key, no secret ever travels over the internet, and nothing is stored on the website's servers that a data breach[↗](/data-breach) could expose.

 This design also makes passkeys naturally **phishing[↗](/phishing)-resistant**. A fake login page can trick you into typing a password, but it cannot trick your device into using a passkey meant for a different, legitimate site, the passkey simply won't work there.

 [Creating Strong, Memorable PasswordsWhy passwords get cracked, what makes a password strong, and practical ways to create passwords that are hard to break but easy to remember.](/creating-strong-memorable-passwords) 
## How signing in with a passkey feels
  - You go to a website or app that supports passkeys and choose "sign in with a passkey" (or it's offered automatically).
 - Your device asks you to confirm with your fingerprint, face, or device PIN.
 - You're signed in, no password typed, no code to copy from a text message.
  
## Setting up your first passkey
 Support is growing quickly across major platforms:

  - **Google Account:** Settings → Security → "How you sign in to Google" → Passkeys.
 - **Apple ID:** passkeys are built in automatically via iCloud Keychain on modern iPhones and Macs.
 - **Microsoft Account:** account.microsoft.com → Security → Advanced security options → Passkeys.
  Once created, your passkey syncs securely across your own devices through your device's cloud account (Apple, Google, or a password manager[↗](/password-manager) that supports passkeys), so you're not locked out if you get a new phone.

 
## What if I lose my device?
 Because passkeys sync through your account (not stored on a single device), signing into a new device with the same account typically restores access to your passkeys. It's still worth keeping at least one backup[↗](/backup) sign-in method (like a recovery code) for critical accounts, the same way you would with two-factor authentication[↗](/authentication).

 [Protect Your Accounts with Two-Factor AuthenticationThe single most effective step you can take to protect an account even if your password is stolen, with step-by-step setup for major platforms.](/protect-your-accounts-with-two-factor-authentication) 
> Passkeys aren't just more convenient than passwords, the design itself removes the two biggest weaknesses of passwords: reuse and phishing.