In our passkeys versus passwords article we explained the benefits this technology offers in terms of convenience and security.
There’s still a few questions around how passkeys actually work and what happens when you’re dealing with multiple devices.
I’ve rounded up your most common questions around passkeys to help demystify them.
Passkeys FAQ
In simple terms, what is a passkey?
A passkey is a pair of numbers your device creates and stores for an account. Instead of thinking of a password, remembering it, and typing it in, you can simply log in with a device.
Usually, this works with biometrics like a fingerprint or Face ID to prove it’s really you signing in with the device.
How do you create and use a passkey?
Passkey creation happens in a website or app’s account and security settings, or at account creation. Look for “passkey,” “security key,” or “sign in without a password.”
Not every account supports it yet, but most of the important ones have embraced the technology.
Selecting this triggers your device to generate the passkey and confirm it with fingerprint, face scan, or PIN. That’s the entire process.
Using it to sign in is just a matter of tapping the passkey prompt and confirming it.
How do passkeys work if you want to sign in from multiple devices?
Cloud sync handles this if your devices share the same account where the keys are stored. For example, if using Apple ID for your passkeys, signing in works on both an iPhone and Mac.
For other devices that aren’t signed into the passkey account, you can often sign in with other methods like QR code scan or Bluetooth handshake that proves you hold the credential without having to set up the passkey again.
Can you use a passkey across different platforms?
Syncing across platforms like Apple to Windows or PC to Android doesn’t work that easily, but you can still sign in.
When logging in, QR code scan is usually the easiest method for a quick sign-on to a new device.
Alternatively, you could use a cross-platform password manager like Bitwarden or 1Password to store your passkeys instead of an Apple, Google, or Microsoft account. That makes it easy to sync across all kinds of devices.
Can you share passkeys with other people, like to share a family account?
It depends on the ecosystem where your passkeys are stored. Apple explicitly supports this by sharing with trusted contacts, while Google’s family sharing only works with passwords currently.
A shared vault in a password manager like Bitwarden or 1Password is another way to share with family.
If a device is stolen, how do you cancel or block the passkey?
Passkeys are typically locked behind a secondary authentication like fingerprint or face scan, and can’t be used without it, so there’s little to worry about if they’re secured with biometrics.
If the passkey is secured with PIN-only, it’s important to take action to remove its access.
To remove the passkey, go into the account’s security settings and disable the passkey attached to that device. Most account settings provide a list of devices.
It may be worth removing the device from the Apple ID or Google account’s trusted device list too if that’s where your passkeys are stored.
What’s the best way to go about replacing logins with passkeys?
Start with the accounts that matter most, like email accounts, bank accounts, and anything with sensitive info attached to it.
Once you’ve secured the most important and frequently used accounts, just swap them across as you use them when you see the opportunity.
Dealing with every login at once feels like an overwhelming task, but if you’re up for it, a good way might be to check your saved logins in your browser.
Once you’ve upgraded an account with a passkey, it’s usually worth deleting the password as a login option where available, since it’s still a security risk.
How should you consolidate passkeys? What platform should you use?
It’s easiest to use the passkey platform you have with you most of the time; that’s usually your phone.
The worst option would be to scatter them across ecosystem specific vaults like your Microsoft account on PC and Apple or Google on your phone.
For better flexibility, saving passkeys to a manager like Bitwarden makes it easier to sign in on desktop, phone, and tablet.
Comments