Passkey Explainer
A passkey is a sign-in credential that replaces a memorized password with a cryptographic key pair. Your device keeps the private key, while the website keeps the matching public key. The private key stays on the device rather than being sent to the website.
When you sign in, the website asks the device to prove it holds the private key. Your phone, tablet, or computer unlocks that key with a fingerprint, face scan, or local device PIN. Those checks happen on the device; they are not shared with the website as a password.
Passkeys are designed to be tied to the real website address, which helps protect against a look-alike phishing page. They can be saved to a device or securely synchronized between a person’s approved devices, depending on the platform and account settings.
A passkey is still an account credential, so recovery matters. People should keep their device recovery options current and use the account provider’s trusted recovery process if they lose access to every signed-in device.
A passkey is a passwordless sign-in credential built from a private key on a device and a public key held by the service. The device uses a fingerprint, face scan, or PIN only to unlock its private key.
The website sends a challenge, and the device signs it with the private key after local approval. The website checks that response with the public key already associated with the account.
Recovery depends on the device platform and the account provider. Keeping trusted recovery methods current is important in case every device holding the passkey is lost.
Explore more "Explainers"
Discover additional explainers across politics, science, business, technology, and other fields. Each explainer breaks down a complex idea into clear, everyday language—helping you better understand how major concepts, systems, and debates shape the world around us.