Learn · Passwords
Switch important accounts to passkeys
10 min · recommended
Why this matters. A passkey replaces a password with a secret that stays on your device and is unlocked by your face, fingerprint or PIN. There's nothing to type, so there's nothing to phish, and nothing a website breach can leak. Microsoft, Apple, Google, Amazon and many banks already support them.
1
Add a passkey where it's offered
Start with your Microsoft, Google and Apple accounts (see those guides), then shopping and bank sites. Look for 'Passkeys' or 'Sign-in options' in each site's security settings.
2
Keep it synced
Save passkeys in your password manager (Bitwarden, Apple Passwords or Google Password Manager) so they work on all your devices and survive a lost phone.
Check your understanding
Can a passkey be phished?
No. It only works on the real website it was made for, and there's nothing to type into a fake one.
Want a checklist that tracks this for your whole family? Sign in to HomeOS.
Checked against:
FIDO Alliance: Passkeys · Apple: Use the Passwords app
· last reviewed 2026-09