A Google passkey lets you confirm a sign-in with the way you unlock your device, such as your fingerprint, face or screen PIN. It is designed to resist phishing. Set it up on a device you control and test another way into the account before you rely on it.
Create a passkey on a personal device
- Turn on screen lock and update your browser. For an Apple device, check the iCloud Keychain requirements in Google’s passkey help.
- Open Passkeys and security keys directly from your Google Account, confirm the account shown, then choose Create a passkey.
- Follow the device prompt to save it and confirm with your screen lock. Only do this on a device you personally own and use.
Test the new sign-in before ending your current session
Leave your existing session open and test from another supported browser profile or a second trusted device. If using a phone to approve a computer sign-in, follow the on-screen QR instructions and turn on Bluetooth on both devices. Avoid relying on a private browsing window for this test: some combinations restrict passkeys there.
Keep a recovery option that does not depend on one phone
Review your recovery email and phone, and keep another supported sign-in method available. If you use 2-Step Verification, review Google’s backup codes and store them securely somewhere you can reach without the phone. A second personal device or supported security key can also help. Check whether the passkey is synced by your password manager before assuming it exists only on one device.
If a device goes missing, use another trusted sign-in method and review the missing device and passkey in your Google Account. On a work or school account, your administrator can control whether you can skip the password. A passkey can still be available for verification in some managed configurations.
