Setting Up Passkeys on Your Main Accounts
A step-by-step guide to setting up passkeys on your email, shopping, social media and other accounts, on phones and computers, plus how to keep a backup way in.
Passkeys replace passwords with your fingerprint, face or device PIN, and they cannot be phished. Many major services support them. Here is how to set them up on your most important accounts, and how to make sure you never lock yourself out. If you are new to passkeys, start with what is a passkey.
Before you start
- Update your phone and computer to recent software versions.
- Set a screen lock (PIN, fingerprint or face) on your devices. Passkeys depend on it.
- Secure the account your passkeys will sync to, such as your phone's cloud account or your password manager, with a strong password and two-step verification.
The general steps
Menu names differ between services, but the process is usually the same:
- Sign in to the account normally, on the official website or app.
- Go to Security (sometimes "Sign-in and security" or "Login settings").
- Choose Passkeys and then Create a passkey.
- Confirm with your fingerprint, face or device PIN.
- Sign out and sign back in using the passkey to check it works.
Which accounts first
- Your main email, because it controls password resets.
- Your password manager, if supported.
- Shopping accounts with saved cards.
- Social media and messaging accounts.
- Payment and financial apps that offer passkeys.
Using passkeys across devices
- Synced passkeys: passkeys saved in your phone's cloud account or a password manager appear on your other devices signed in to the same account.
- Phone as a key for a computer: when signing in on a computer, choose the option to use a phone. Scan the QR code, then confirm on the phone.
- Security keys: for extra protection, register a physical security key as a second passkey.
Always keep a backup way in. Register passkeys on two devices, or save backup codes. See backup codes.
After setup
- Keep the account's password strong and unique in your password manager, if the service keeps it.
- Review and remove weaker recovery methods where possible, such as old phone numbers.
- Check the list of passkeys in each account occasionally and remove devices you no longer use.
If something goes wrong
- The passkey option does not appear: the service or your device may not support it yet. Update your software or keep using a password with two-step verification.
- You changed phones: synced passkeys usually move with your cloud or password manager account. See changing phones safely.
- You are locked out: use backup codes or the service's official recovery process.
Never set up a passkey from a link in an email or message. Go to the account's settings yourself. Unsure about a message? Paste it into CyberWatch AI Scan.
Passkeys are the strongest step in how to protect your accounts.
Frequently asked questions
Do I still need my password after setting up a passkey?
Many services keep your password as a backup. Keep it strong and unique, stored in your password manager, and consider removing other weaker recovery methods.
Can I use a passkey on a computer if it is stored on my phone?
Often yes. Many services show a QR code on the computer that you scan with your phone, which then confirms the sign-in with your fingerprint, face or PIN.
How many passkeys should I create?
Create one on each device or password manager you regularly use, so you are not dependent on a single phone.
Sources
- Sign in with a passkey instead of a password, Google Account Help
- Multifactor Authentication, US Cybersecurity and Infrastructure Security Agency
- Use Two-Factor Authentication To Protect Your Accounts, US Federal Trade Commission
