What Is a Passkey?

A passkey is a modern sign-in method that lets you log in without typing a traditional password. Instead of remembering a secret string, you usually authenticate with your fingerprint, face, PIN, or device unlock method.

Why Passkeys Exist

Passwords are easy to reuse, forget, leak, and phish. Passkeys were designed to reduce those problems. They rely on cryptographic keys stored on your device rather than a reusable password you type into a site.

That makes them harder to steal through fake login pages.

How a Passkey Works in Practice

When you create a passkey for a service, your device stores part of the credential and the service stores the matching public information. During sign-in, your device proves it is the right one without sending a password the same way old systems do.

From the user’s point of view, it feels simple. You choose the account and confirm with the same unlock method you already use on the device.

Are Passwords Gone Now?

Not completely. Many services still support both passwords and passkeys, and some accounts keep passwords as a fallback. So passkeys are expanding fast, but the transition is still in progress.

The important point is that they are not just “passwords stored differently.” They are a different approach to authentication.

Summary

A passkey is a passwordless login method that uses your device and local identity verification instead of a typed password. It is designed to be easier to use and harder to phish. For the surrounding concepts, see What Is Authentication? and What Is Two-Factor Authentication?.