Passkeys let you sign in with your face, fingerprint or PIN, and can't be phished. What they are and what to expect.
Passkeys are a newer way to sign in. Instead of typing a password, you confirm it's you with your face, fingerprint or device PIN. Microsoft, Apple, Google and many other services now support them.
Why they're safer
- Nothing to steal or phish. A passkey only works on the real website it was created for, so a fake sign-in page can't use it.
- Nothing to remember or reuse. Each passkey is unique to one account.
- Your fingerprint or face stays on your device. It isn't sent to the website.
What to expect
- For your work account: your organization decides whether passkeys are turned on. If they are, you can add one in Microsoft Authenticator or at mysignins.microsoft.com/security-info, and we'll tell you when.
- For personal accounts: many sites now offer to create a passkey in their security settings. It's worth saying yes for email, banking and shopping accounts.
- Keep a backup, such as a second device or your recovery options, in case you lose your phone.
Asked to create a passkey for your work account and not expecting it? Check with us first on 707-755-8000.
