What is Passkey?

A passkey is a passwordless sign-in credential based on a public/private key pair, stored on the user's device or password manager and unlocked with a fingerprint, face scan or PIN.

Passkeys use the WebAuthn / FIDO2 standard. The website stores only the public key; the private key never leaves the authenticator and only works on the domain that created it, so passkeys cannot be phished, reused or leaked in a database breach.

All major browsers, operating systems and password managers support passkeys, and synced passkeys follow the user to new devices.