How to Switch to Using Passkeys With Your Google Accounts

Passkeys from Google Password Manager are available to all Android apps, including Chrome and other browsers.

When the user creates a passkey on an Android device it’s stored and synchronized with their other Android devices, and their passkey secrets are encrypted end-to-end.

On the sign-in screen, tap the account name field. Tap “Other options,” “Passkey from nearby device,” or similar, then follow the onscreen instructions to display a QR code on the screen. This is how you turn on the passkey.

The future is passkeys, not passwords: Google accounts are the latest to make the switch, following similar moves by Apple and Microsoft over the last couple of years (with other smaller names also making the switch).

It means more convenience and more security for your account, and no need to have to remember dozens of lengthy passwords.

Essentially, a passkey means that the device you’re using (typically your phone or laptop) proves your identity with whatever screen lock is in place—PIN, facial recognition, fingerprint sensor—proving that you are who you say you are.

In simple terms, the tech you use to unlock your phone becomes the tech you use to get into your digital accounts, too. They replace two-step verification as well as the password, and they work with hardware keys.

Unlike passwords, passkeys can’t be written down or leaked out on the web—they’re tied to your device. Google describes passkeys as “the future of secure sign-in, for everyone”, and if you want to make the switch now, we’ve outlined the steps required below.

What are passkeys?

Passkeys come in two parts: A public passkey that’s stored by the site or app you’re logging into, and a private passkey that’s stored on your specific devices.

For this private passkey to be used for authentication, you’ll need to prove your identity: This is where your phone or laptop’s unlocking technology (like reading a fingerprint or requesting a PIN) comes in.

These private passkeys are kept encrypted and secure on individual devices. They can’t be guessed, or leak out from a server on the web, or written down.

What’s more, because of the two pairs that make up the passkey, you can’t be tricked into logging into a site or app that’s not what it’s pretending to be (such as a fake banking website that’s trying to get you to part with your login credentials.

As far as the user-facing experience goes, when logging into a site or app on a new device, you’ll be given the option to switch to a passkey method, which will then be used by default the next time authentication is required.

The authentication is usually only required when logging into new sites and apps on new devices—once you’re logged in, you’re logged in.

Passkeys can be synced between devices, but right now this only happens across Android, Windows, and iCloud—your credentials sync up between iPhones and Macs, for example, but not from your iPhone to your Windows laptop, or from your iPhone to your Android tablet.

The process of setting up new devices on other operating systems involves a few more steps involving QR codes and Bluetooth, but it doesn’t take long.

So what happens if you lose your phone or laptop? Like password managers and password syncing today, the idea is that you always have several devices authorized, so you can use another gadget to verify your identity (and set up a replacement phone or laptop).

If you lose all your devices with passkeys on them, then you’ll need to fall back to older methods to regain access to your accounts—passwords, recovery email addresses, and phone numbers.

How to set up passkeys for your Google account

Switching over only takes a few seconds.

You can opt to create a passkey whenever you’re signing into Google from somewhere new, but it’s perhaps easiest to head to your Google account on the web, then choose Security and Start using passkeys.

You might find that some of your devices have already started creating passkeys, should you want to use them. Click Use passkeys to enable these keys and switch from passwords on these devices.

You’re also able to click Create a passkey to generate a passkey pair for the device you’re currently using. Be sure to only do this on devices only you have access to—anyone who can get past the screen lock on the device will be able to get into your Google account (which is how it currently works with passwords too, once you’re logged in).

Now, whenever you need to log into your Google account on a new app or site, you’ll be able to use a passkey and the authentication built into your device (the Touch ID sensor on a MacBook Pro, for instance)—no password required.

The same prompt shows up whenever you’re making important changes, such as editing the security settings for your Google account.

You’re able to revoke passkeys from your Google account page if you lose an authorized device and think someone else might be able to get past the screen lock.

While it’s still relatively early days for passkeys, support for them should get more and more widespread as time goes on—major password manager tools, for instance, are expected to start adding passkey support in the near future. Over time, switching between devices and platforms and browsers should get more straightforward.

How do I use passkeys with Google Account?

To create a passkey for a website or application, a user first must register with that website or application.

• Go to the application and sign in using the existing sign-in method
• Click Create a passkey button
• Check the information stored with the new passkey
• Use the device screen unlock to create the passkey

How do I enable passkeys on Android?

Navigate to your Google profile and head to Manage your Google Account > Security > Passkeys. Tap the blue Use passkeys button. On a device that isn’t already set up as a passkey (Android devices automatically create passkeys when you’re signed in) press Create a passkey.

Where can I use passkeys now?

directory that has a list of some sites that currently support passkeys as a sign-in and/or multifactor authentication method.

Some notable sites that support passkeys as of early 2023 include Best Buy, Cloud flare, eBay, Kayak, and PayPal (in the U.S.). And Google added passkeys to their accounts in early May 2023.

Are passkeys available now?

Passkeys are based on an industry standard and available across popular browsers and operating systems that people use every day, including Android, ChromeOS, iOS, macOS, and Windows.

Do passkeys work in apps?

Passkeys are a replacement for passwords, offering a faster, easier, and more secure sign-in experience for your apps and websites. They’re strong, resistant to phishing, and designed to work across Apple devices and nearby non-Apple devices.

Are passkeys safe?

Unlike passwords, which are vulnerable to a number of hacking methods, passkeys are resistant to online attacks like phishing. This makes them more secure than processes like SMS one-time codes, which are often used by banks to verify your identity when signing in.

Should I use passkeys?

Unlike passwords, passkeys don’t need to be memorized, there’s no such thing as a “weak” passkey, and they can’t be stolen in a data breach. Passkeys are more secure than passwords, incredibly easy to use, and are supported by every major platform run by Apple, Google, and Microsoft.

What is the difference between passkey and 2FA?

In a two-factor authentication (2FA), a user must provide a password as well as a passkey to access their account or data. Passkeys can take many forms, including alphanumeric strings, biometric data, and physical tokens. Some examples of physical tokens are security keys or smart cards.

What is the difference between a passkey and a security key?

The utility of security keys is that they can help prevent two big problems with passwords: phishing and password theft. Passkeys are different from passwords in that they address those problems directly without the need for a security key. Unlike passwords, passkeys are always strong and unique.

How do I turn on passkeys?

On the sign-in screen, tap the account name field. Tap “Other options,” “Passkey from nearby device,” or similar, then follow the onscreen instructions to display a QR code on the screen.