Passkey

Passkeys give you phishing-resistant, password-free sign-in that’s faster and more secure. Register more than one passkey and keep a recovery method so you’re protected and never locked out.

Add a passkey to your account

What you need first

• A modern phone, tablet, or computer with an up-to-date OS and browser (recent iOS/Android, Windows, macOS; current Chrome, Edge, Safari, Firefox).
• A device authenticator (built-in biometrics / device PIN) or a physical security key (USB/Lightning/NFC/Bluetooth).

Step-by-step

1. Open Account Settings > Security.
2. Choose Add passkey
3. Give the passkey a name (e.g., “Office iPhone”) and save.
4. Pick the device you want to use (this device or an external security key).
5. Confirm using your device unlock method — face/fingerprint, device PIN, or press the security key.
6. Repeat to register a second device/key as a backup.

How a passkey protects your account

• Phishing-resistant: passkeys use public-key cryptography so a malicious site can’t trick your device into revealing a reusable secret.
• No password to steal or reuse: there’s nothing for attackers to guess, reuse, or leak from a server.
• Strong, per-site cryptography: each site gets its own key pair — a stolen key from one site can’t be used at another.
• Stored securely on your device or in an encrypted cloud keychain: private keys never leave your device unencrypted.
• Faster sign-in: unlock with biometrics or PIN instead of typing a password + 2FA.
• Built-in multi-factor strength: possession of your device plus biometric/PIN provides high assurance without extra codes.

Recovery & best practices

• Register at least two passkeys (e.g., phone + laptop or phone + hardware key). That prevents lockout if one device is lost.
• Enable cloud keychain sync (iCloud Keychain, Google Password Manager, etc.) if you want passkeys to move across your devices — but treat that sync account like a high-value account.
• Keep a recovery option active (verified email, account recovery phone, or a backup authenticator) so you can regain access if you lose every registered device.
• If a device is lost or stolen: immediately remove/revoke its passkey from your account security settings and, if possible, remotely wipe or lock the device.
• Don’t share devices or unlock credentials. Treat biometrics and device PINs as private.

Troubleshooting & compatibility tips

• If your browser or OS is out of date, update it — older versions may not support passkeys.
• If your account doesn't have a passkey yet, you’ll fall back to password.
• If adding a passkey fails, try a different browser or register a hardware security key (YubiKey, etc.) as an alternative.