A
passkey is a sign-in credential stored on a device, security key or supported credential manager. You confirm a sign-in by unlocking that device, for example with its PIN or biometric check. Unlike a password, there is no reusable secret to type into a website.
Quick example
Your email service offers a passkey. On your own phone, you choose it and unlock the phone with its PIN or biometric check. You do not type a password or copy a code. A fake lookalike site cannot use that passkey for the real service.
Why it matters
The sign-in is tied to the service and your authenticator, which reduces the risk from reused passwords and phishing pages.
Do this next
Check whether an important account supports passkeys. Add one only on a device you control, and keep its recovery methods current.
