Passkeys: passwordless sign-in
A passkey is a sign-in key tied to your device. Instead of a password you confirm sign-in with a fingerprint, your face, a PIN or a hardware security key.
A passkey can't be peeked at, guessed or phished on a fake site: it only works on the real sourhost domain.
How to add one
- Settings → Security → the Passkeys block.
- Click Add a passkey.
The Passkeys block is below the two-factor authentication block; the add button is on the right (marker 3).
- Enter a name — e.g. "MacBook Touch ID" or "YubiKey", to tell devices apart later.
- Confirm in the browser's system dialog: Touch ID, Face ID, Windows Hello or a security key.
The passkey appears in the list with its creation date and last sign-in date.
How to sign in with a passkey
On the sign-in page choose passkey sign-in and confirm with the method you used when creating it. No password needed.
Managing
- Rename — if the names pile up and get confusing.
- Delete — always delete the passkey of a lost or sold device.
A passkey can be added on several devices: the work computer, the home one, the phone.
If adding fails
The browser may report it couldn't finish creating the passkey. What helps:
- try again — sometimes the system dialog closes by itself;
- pick another method: e.g. Windows Hello instead of a password-manager extension;
- update the browser — passkeys are supported by current versions of Chrome, Edge, Safari and Firefox.
A passkey doesn't cancel two-factor authentication and doesn't replace the password — the password remains the fallback way to sign in. Keep it strong.