Passkeys, in plain language

A passkey lets you sign in with your face, fingerprint, or phone PIN instead of a password. There is no password to type, so there is nothing for a fake site to steal.

How it works (simple version)

• Your device makes a secret key that stays on your device or in your password manager.
• When you sign in, you unlock it with your face, fingerprint, or screen lock.
• A passkey only works on the real website it was made for. That is why it helps against phishing. The FIDO Alliance, the group behind the standard, explains more: FIDO Alliance: Passkeys.

Why it is good for families

• Nothing to remember or write down.
• Fake login pages cannot trick you into giving it away.
• Works across devices through your phone, Apple, Google, or a password manager.

Turn on your first passkey

1. Start with your main email account. Google explains passkeys here: Google Account Help.
2. On iPhone, iPad, or Mac, Apple explains passkeys here: Apple Support.
3. Look for "passkey" or "sign in without a password" in the security settings of other sites you use.
4. Keep a backup way in, like a recovery code, in case you lose your phone.

Do I still need a password manager?

Yes, for now. Most sites still use passwords. Many password managers can store passkeys too.

General information only. Not legal, financial, or security advice, and not a guarantee. Check with the company or agency involved.