Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To enable a passkey, sign in to an account that supports passkeys, open its security or sign-in settings, choose the passkey option, and approve the prompt by unlocking a personal device. Then check that the passkey appears in the account’s passkey list and keep a recovery method available.

What makes a passkey phishing-resistant?

A passkey is a sign-in credential associated with a website or app’s identity. Your browser or operating system helps ensure it is used only with the registered service, rather than a lookalike phishing site. Google for Developers describes passkeys as resistant to phishing for this reason: Google’s passkey overview.

A passkey does not mean every account is passwordless, and it does not work on a service that has not implemented passkeys. Availability and sign-in behavior are controlled by each service.

How to create a passkey for an account

  1. Sign in to the account. Use the service’s website or app and authenticate with the method you currently have.
  2. Open its security settings. Look under headings such as Security, Sign-in, Authentication, or Passkeys. If you cannot find the control, check the service’s own help pages; there is no universal passkey settings screen.
  3. Choose the passkey action. Select “Create passkey,” “Add passkey,” or the service’s equivalent.
  4. Approve the device prompt. Follow the browser or operating-system instructions and unlock the device when asked. The device may use its screen lock, such as a PIN, fingerprint, or face recognition.
  5. Check the account’s passkey list. Confirm the new credential is shown. Keep an existing recovery method, such as another sign-in factor, unless you have deliberately set up and tested an alternative.

For a Google Account, the direct passkey settings page is Google Account passkey settings. Google says adding a passkey does not remove existing authentication or recovery factors. However, a passkey can satisfy the second step for accounts using 2-Step Verification or Advanced Protection because it verifies possession of the device. See Google’s passkey sign-in guidance.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Sale
Yubico - YubiKey 5C NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified - Protect Your Online Accounts
  • POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
  • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts

Choose where the passkey is stored

Storage determines which of your devices can offer the passkey. Some credentials are associated with a particular device; others are synchronized through a credential manager. These are provider-specific systems, not one universal passkey sync service.

Storage route What to expect What to check
Apple iCloud Keychain Apple says passkeys sync across a user’s devices using iCloud Keychain. For passkey use on iPhone, Apple requires iCloud Keychain and two-factor authentication. See Apple’s passkey security information and its iPhone passkey guide.
Google Password Manager or another supported Android credential manager Android explains that passkeys can be created and saved to Google Password Manager or other supported managers. Choose a manager you can access on the devices you use. See Android’s passkey sign-in guidance.
Microsoft or another credential manager Microsoft says synced passkeys may be available across devices through Microsoft’s or another credential manager. Availability depends on the manager and the devices involved. See Microsoft’s passkey explanation.
FIDO2 hardware security key A supported FIDO2 key can hold a passkey for services that accept it. It is optional, and compatibility varies by service. Google lists a FIDO2 security key as one way to use a Google Account passkey.

Before enrolling, decide whether you need the passkey on one device or across several. Follow the storage provider’s setup and recovery guidance, and consider adding a passkey on a second personal device or a supported hardware key if you need a spare route.

Rank #2
Yubico - Security Key C NFC - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

Check device and service requirements

Passkey support depends on the account, device, operating system, browser, and storage method. Google’s current Account Help page, accessed October 4, 2026, lists these minimums for Google Account passkeys:

  • Computer: Windows 10, macOS Ventura, or ChromeOS 109 or newer.
  • Phone: Android 9 or iOS 16 or newer.
  • Browser: Chrome 109 or newer, Safari 16 or newer, Edge 109 or newer, or Firefox 122 or newer.
  • Alternative: A FIDO2 hardware security key.

Google also advises using a phone screen lock, enabling Bluetooth when using a phone to sign in on another computer, and enabling iCloud Keychain on Apple devices. These are Google’s published requirements and guidance, not a universal specification for every service. Check the service’s current help page before troubleshooting an enrollment prompt.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
Yubico - YubiKey 5 NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-A or NFC, FIDO Certified - Protect Your Online Accounts
  • POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
  • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts

Protect access and plan for recovery

Use only a device you control

Do not create a Google Account passkey on a shared, borrowed, or otherwise shared-access device. Google warns that anyone able to unlock the device may be able to access the account with its passkey. This matters for family tablets, workplace computers, and devices used by multiple people. For work or school accounts, an administrator’s policy may affect passkey use; Google notes that Workspace users may not be able to use a passkey as their only sign-in method.

Keep a recovery route

Retain your existing recovery and authentication options while setting up passkeys. A passkey may be unavailable if you lose access to the device or credential manager that holds it, so ensure you can still reach the account through another method. For important accounts, add another passkey only on a personal device you control or on an appropriate supported FIDO2 key.

Rank #4
Yubico - Security Key NFC - Basic Compatibility - Multi-Factor Authentication (MFA) Key, Connect via USB-A or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

When an account does not offer passkeys

If you cannot find a passkey option, the service may not support passkeys for that account, or the control may be located under a different security or sign-in heading. Check that account’s official support information and confirm any device or administrator requirements. Do not assume that a passkey created for one service can be reused as a sign-in credential for another; it is tied to the service identity for which it was registered.

Best Value
Thetis FIDO2 Security Key (USB-A, 2-Pack) - Hardware MFA & Passkey Access for Business, School ERP & Employee Accounts | Compatible with Windows, Google Workspace, Apple ID, Coinbase, Salesforce
  • FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
  • Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
  • Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
  • Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
  • Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.