What a passkey is and why you'd want one

A passkey is a way to sign into apps and websites using your face or fingerprint instead of typing a password. When you add a passkey to your iPhone, you're storing a digital key on your phone that proves who you are — no password to remember or type.

The main reason to use one: you don't have to manage yet another password. Your iPhone handles the security part. If a website gets hacked, the hackers don't get your passkey because it never leaves your phone. They only get a record that you have one.

Passkeys work on iPhones running iOS 16 or later. If you have an older iPhone, you won't see the passkey option when you try to sign in somewhere.

Key Takeaways

  • Passkeys use your face or fingerprint to sign in, and they live only on your iPhone — not on a company's server.
  • You create a passkey by signing into a website or app normally, then choosing "Create a passkey" when the option appears.
  • Your iPhone will ask you to confirm with Face ID or Touch ID, then save the passkey to your phone.
  • If you lose your iPhone, passkeys stored on it won't work on a new phone unless you set up iCloud Keychain to sync them across your devices.
  • Not every website or app offers passkeys yet — you'll only see the option if they've built it in.

The step-by-step process for creating a passkey

Start by signing into the website or app the normal way — with your username and password. Once you're logged in, look for a settings or account page. Most services put the passkey option under "Security," "Sign-in methods," or "Account settings."

When you find the passkey section, you'll see a button that says something like "Create a passkey" or "Add a passkey." Tap it. Your iPhone will ask you to confirm with Face ID or Touch ID — use whichever one is set up on your phone. That's it. The passkey is now saved.

The next time you try to sign into that service, you'll see a passkey option on the sign-in screen. Tap it, confirm with your face or fingerprint, and you're in. No typing required.

What happens if you get a new iPhone

If you set up iCloud Keychain on your current iPhone, your passkeys will sync to your new phone automatically when you sign in with the same Apple ID. iCloud Keychain is Apple's system for storing passwords and passkeys across your devices — it's turned on by default on most iPhones.

To check whether iCloud Keychain is on, go to Settings, tap your name at the top, then tap iCloud. Look for "Keychain" in the list. If it's on, your passkeys are already syncing. If you don't see it or it's off, turn it on and your passkeys will start syncing to your other Apple devices.

If iCloud Keychain is off and you get a new phone, your passkeys won't transfer. You'll have to create them again on the new phone. This is why turning on iCloud Keychain early matters — it's easier than recreating passkeys later.

Passkeys versus passwords: what actually changes

With a password, you type the same string of characters every time. A hacker who steals the company's database gets your password and can try it on other sites. With a passkey, the company never sees your biometric data — they only see a record that you have a passkey and that you proved who you are.

This means passkeys are harder to steal because there's no single piece of information a hacker can grab and reuse. Even if a company's servers are breached, the passkey itself stays on your phone. The hacker gets a useless record, not a key they can use elsewhere.

The trade-off: you're tied to your iPhone. If you lose it and don't have iCloud Keychain set up, you can't sign in from another device until you create a new passkey. With a password, you could sign in from any device as long as you remember it.

When a website or app doesn't offer passkeys yet

Many services still use only passwords. You'll know a passkey option isn't available if you don't see it on the sign-in or account settings page. This is normal — passkeys are still rolling out. Major services like Google, Microsoft, and Apple support them, but smaller apps and websites may not.

If you want to use a passkey somewhere and it's not an option, you can ask the company to add it. Many services track requests and prioritize features that users ask for. In the meantime, you can keep using your password the way you always have.

Deleting a passkey if you change your mind

If you create a passkey and later want to go back to using a password, you can delete it. Go to the website or app's account settings, find the passkey section, and look for a delete or remove button. Tap it and confirm. The passkey is gone from your iPhone.

You can then set a new password and sign in with that instead. Deleting a passkey doesn't affect your account — it just removes that particular sign-in method from your phone.

Frequently Asked Questions

Can I use the same passkey on my iPad and Mac?

Yes, if you have iCloud Keychain turned on. Passkeys sync across all your Apple devices that are signed in with the same Apple ID. You can create a passkey on your iPhone and use it to sign in on your iPad or Mac.

What if I forget which websites have my passkeys?

Go to Settings, tap your name, then iCloud, then Keychain. You'll see a list of all your saved passwords and passkeys. This shows you everywhere you've set up a passkey so you can see what's synced across your devices.

Can someone use my passkey if they have my iPhone?

No. They would need to unlock your iPhone with Face ID or Touch ID first. Even if they do, they still need your biometric data to use the passkey. Passkeys are only as find as your iPhone's lock screen.

Do I need a passkey for every account I have?

No. You can use passkeys for some accounts and passwords for others. There's no rule that says you have to switch everything at once. Start with accounts that matter most to you — email, banking, social media — and add passkeys as you go.

What if my iPhone doesn't have Face ID or Touch ID?

Passkeys require biometric authentication, so your iPhone needs either Face ID or Touch ID to use them. If your phone has neither, you won't be able to create or use passkeys. You can still use passwords normally.