What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
You cannot replace SMS verification with one universal switch. For each account, enroll a passkey or FIDO security key in that provider’s security settings, add a recovery route, test the new sign-in on another device or browser, and only then remove SMS if the service allows it. Adding a passkey normally leaves your existing text-message method in place.
What changes when you stop using SMS codes?
An SMS code is a one-time number sent to your phone as a sign-in step, usually after you enter a password. It depends on cellular delivery and on the phone number remaining under your control. A passkey is a digital credential stored by a supported device or credential manager. You unlock it with the device’s screen lock, fingerprint, face unlock, or another local method; you do not read or type a code into the website.
A security key is a separate physical authenticator. You connect or tap it and usually confirm with a touch or a PIN. FIDO1 and FIDO2 keys can serve as second-step authenticators. A FIDO2-capable key can also create and store a passkey on the hardware itself. These are different choices: a passkey may travel between supported devices through a credential manager, while a physical key remains a separate object that you carry and can keep as a spare.
Free tools Windows power users keep installed
One-click scans. No signup required.
Passkeys are designed to resist phishing because the credential is bound to the legitimate website and is not exposed as text that can be copied into a fake login page. Google says passkeys cannot be accidentally shared or typed into a deceptive site. That protection does not mean every account supports them, nor does it remove the need for recovery planning.
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Check support and requirements before changing an account
Passkeys and security keys are enrolled separately for each service. Open the provider’s current help page or security settings and verify the method is offered before you delete anything. Terminology varies: one account may show “Passkeys,” another “Security keys,” “Hardware security key,” “WebAuthn,” or “FIDO2.”
Device and browser checks
- Use an operating system and browser that support the provider’s passkey implementation. Google’s documented consumer requirements include Android 9 or later and iOS 16 or later, plus supported desktop operating systems and browser versions; the exact minimums can change.
- For a phone-to-computer passkey flow, Bluetooth may be required on both devices. The phone must have a screen lock enabled.
- Make sure the device’s fingerprint or face-unlock feature works, or know the screen-lock PIN or password that will unlock the credential.
- For a physical authenticator, choose a FIDO2-capable key if you want the key itself to hold a passkey. Check whether your account accepts USB, NFC, or Bluetooth and whether your computer or phone has the matching connector or radio.
- If you rely on a synced passkey, confirm which credential manager stores it and how that manager recovers access when you replace or lose a device.
Account checks
- Confirm that you can still sign in with the current password and SMS method. You need that existing method to authorize enrollment on most services.
- Review the account’s recovery phone, recovery email, backup codes, and already enrolled authenticators. Do not remove the only method that can prove your identity.
- For a work or school account, ask the administrator which methods are permitted. Organizational policies can hide consumer options or require a particular key type.
The account-by-account switch procedure
Use this sequence for every important account. There is no phone-level setting that converts SMS codes for all websites at once.
- Open the provider’s current security settings. Sign in using your existing method, then look for the account’s sign-in, two-step verification, authentication-method, or security-key section. Start from the provider’s own website or app rather than a link in an unsolicited message.
- Choose the passkey or security-key enrollment command. Select the option to add a passkey, add a security key, or register a FIDO credential. The service will ask you to approve the action with your password, an SMS code, or another existing factor.
- Complete the device prompt. For a passkey, choose the device or credential manager offered by the operating system and approve it with your screen lock or biometric unlock. For a hardware key, insert or tap it, touch its sensor when prompted, and create a key PIN if the setup requires one.
- Name the authenticator. Use a label that identifies the device or key, such as “Personal phone” or “Office spare.” A useful label lets you remove one lost device later without deleting other credentials.
- Enroll a fallback before testing. Register a second passkey or a second physical key when the service permits it. Update recovery contact information and generate backup codes if the account offers them. Store codes offline in a place you can reach without the signed-in device.
- Test a fresh sign-in. Sign out, open a private browser window, or use a separate device. Verify that the new credential appears and that you can complete the unlock or key-touch prompt without relying on the original SMS code.
- Review the method list. Return to security settings and identify which entries are active. Adding a passkey often changes the preferred sign-in path but does not delete SMS, a password, or existing recovery factors.
- Remove SMS only if that is your deliberate goal. Select the phone-number or text-message method, choose Remove or Turn off, and complete any confirmation challenge. If the provider does not offer a removal control, leave SMS enabled or ask the administrator; do not assume that enrolling a passkey disabled it.
- Repeat for the next account. Banking, email, cloud storage, social, and workplace services each maintain their own enrollment and recovery rules. Keep a written inventory until every high-value account has a tested alternative.
Synced passkey or physical security key?
Neither option is universally better. Choose according to the accounts you use, the devices you carry, and how you want to recover from loss.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →| Consideration | Synced passkey | Physical security key |
|---|---|---|
| What it is | A digital credential stored by a supported device or credential manager. | A separate FIDO authenticator connected by USB, NFC, or Bluetooth. |
| Everyday use | Unlock the device with a PIN, password, fingerprint, or face recognition. | Insert or tap the key and touch it; some keys also require a PIN. |
| Portability | Can be available on additional supported devices through the credential manager’s sync and recovery model. | Works independently of a particular phone, but you must carry it and match its connector or wireless interface. |
| Spare strategy | Add another passkey on a second device when the service supports it. | Enroll a second key and keep it in a separate, secure location. |
| Main dependency | The provider, operating system, browser, and credential manager must interoperate. | The account must accept the key’s FIDO protocol and your device must physically or wirelessly connect to it. |
| Best fit | People who want fewer objects and stay within a compatible device ecosystem. | People who travel between devices, want an authenticator separate from a phone, or need an offline spare. |
A hardware key is optional for most people with a supported phone or computer. If you buy one, look for FIDO2 support and verify the account’s accepted protocols and the key’s USB, NFC, or Bluetooth compatibility before purchase.
Google Account: passkeys and security keys
Google’s account controls illustrate the general process, but labels and supported versions can change. Sign in to your Google Account, open Security, and use the section describing how you sign in or your passkeys and security keys. Choose the command to add a passkey or security key and follow the on-screen verification.
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Adding a Google passkey
- Sign in with your current password and second step.
- Open the passkey option in the Security settings and select the device or credential manager where you want to save it.
- Approve the operating-system prompt with the device screen lock or biometric unlock.
- Give the new credential a recognizable name, then add another passkey or recovery method before leaving the page.
- Open a separate browser or device, start a sign-in, and confirm that Google offers the passkey and that the local unlock completes it.
Google says a passkey can bypass the second authentication step because possession of the unlocked device verifies the sign-in. Adding one does not change or remove existing authentication or recovery factors, so SMS can remain active until you explicitly edit the method list.
Adding a Google security key
- In the same security area, choose the option to add a security key.
- Insert or tap a compatible FIDO key and touch it when prompted. If the key uses a PIN, enter it at the operating-system prompt.
- Register a second key and store it separately if losing the first would prevent you from signing in.
- Test the key in a different browser or device before changing text-message settings.
Google warns that after a new security key is added, it may take seven days before that key is available at sign-in. This waiting period is specific to Google and should not be assumed for other providers. Keep an already working recovery method during that interval.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Google’s account help states: “Your biometric data, used for fingerprint or face unlock, stays on your device and is never shared with Google.” The biometric check unlocks the local credential; the biometric template is not sent as the account’s sign-in data.
Microsoft organizational accounts
Microsoft Entra work and school accounts follow administrator-controlled authentication policies. Use the organization’s Entra security-info page or the enrollment link supplied by your administrator, then add a passkey or security key under the available authentication methods. A policy may require FIDO2, restrict which users can register keys, or retain a fallback method even after a passkey is added.
Microsoft Learn says passkeys become the default authentication experience for Microsoft Entra organizational accounts beginning September 1, 2026. It also says Microsoft-provided SMS and voice delivery will begin retiring February 1, 2027, with exceptions for Global Administrators and external users. These dates apply to Microsoft Entra organizational accounts, not automatically to every personal Microsoft account or every tenant configuration. Administrators should check the tenant’s current policy and communicate the change before disabling a method.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Personal Microsoft accounts
Microsoft is separately phasing out SMS for authentication and recovery on personal Microsoft accounts and describes passkeys and verified email as alternatives. The consumer rollout is not the same schedule as the Entra organizational retirement. Open the current personal-account security page, enroll the offered passkey or security key, add verified recovery information, and follow the account’s own instructions for any SMS-removal prompt.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteIf the personal account still lists text messages and does not provide a removal control, do not infer that SMS has been disabled. Leave the method in place while you establish and test the alternatives that Microsoft currently permits.
How to remove SMS without locking yourself out
Removing a phone number is a separate decision from adding a passkey. Before selecting Remove or Turn off, check all of the following:
- A passkey or security key completes a fresh sign-in in a private browser window or on another device.
- At least one additional authenticator, recovery email, recovery phone, or backup-code set is available and current.
- You know the credential-manager account or device PIN needed to unlock the passkey.
- A spare physical key, if used, is enrolled and stored somewhere other than the primary key.
- You have recorded the provider’s account-recovery process and any waiting period for newly added credentials.
After removal, start another sign-in and confirm that the provider offers the intended passkey or key. Keep the old phone number under your control until this check succeeds, but do not leave it listed as an authentication method if your goal is to stop text-based verification and the service has successfully removed it.
Recovery planning for lost devices and keys
If a phone containing passkeys is lost
Use another enrolled passkey, a physical key, backup codes, or the provider’s account-recovery process. From a trusted session, review the account’s device and passkey list and revoke the lost device. Change the account password if you suspect the device was unlocked or compromised, and update recovery contacts.
Recommended Free Tools
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
If a security key is lost
Sign in with the spare key or another recovery method and remove the missing key from the account’s registered authenticators. Google specifically recommends adding other ways to prove identity in case a security key is lost. A key that is merely misplaced is not a reason to delete every other authenticator; remove only the credential you can no longer secure.
If every authenticator is unavailable
Use the provider’s documented identity-recovery form or administrator process. Recovery may involve a waiting period, additional account history, or proof of control of a recovery address. Support cannot necessarily bypass a properly configured passkey policy, so establish redundant methods before an emergency.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Troubleshooting common enrollment and sign-in problems
The passkey option is missing
The account may not support passkeys, your administrator may have disabled them, or the browser and operating system may be too old. Update the browser and operating system where permitted, try the provider’s current app or website, and check whether the account distinguishes between personal and organizational enrollment.
The phone-to-computer prompt fails
Enable Bluetooth on both devices, keep them nearby, unlock the phone, and verify that a screen lock is configured. If the computer still cannot discover the phone, use a passkey saved directly on the computer or enroll a physical key instead.
The security key is not recognized
Try the connector or wireless method the account supports: a USB-only key will not work through NFC, and an NFC key may require the phone’s NFC setting. Insert the key before selecting the enrollment command, touch the sensor only when prompted, and check whether the browser is asking for a key PIN. A FIDO1 key can provide second-step verification but cannot create a passkey stored on the hardware; that task requires FIDO2.
Best Value
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
The new key works for enrollment but not immediately at sign-in
Some providers impose a security delay. Google documents a possible seven-day delay for a newly added security key. Continue using an existing method during that period and do not remove SMS or another recovery factor until the provider confirms the key is usable.
SMS still appears after adding a passkey
This is expected when the provider keeps existing factors. Open the active-method list and remove the text-message entry explicitly, if the account offers that control and your recovery plan is ready. A passkey does not automatically rewrite the account’s recovery settings.
You cannot remove SMS
The service may require a phone number for recovery, your organization may enforce it, or the rollout may not yet support removal. Keep a stronger method enrolled, ask the administrator about policy, and use the provider’s current guidance rather than deleting the phone number from your device and assuming the account has changed.
A practical rollout plan for multiple accounts
Prioritize accounts by the damage an attacker could cause, not by how often you use them.
- Inventory: list your primary email, password manager or credential manager, financial services, cloud storage, work or school identity, and social accounts.
- Secure the recovery hub: enroll passkeys or keys on the primary email and credential-manager accounts first, because they can reset other accounts.
- Add redundancy: register a second passkey on another supported device or a separately stored hardware key, then save backup codes where offered.
- Test: use a private browser or separate device for each account and record which method succeeded.
- Change SMS selectively: remove text-message authentication only on accounts where the new path and recovery process are verified.
- Review periodically: remove credentials for devices or keys you no longer control and check that recovery email addresses, phone numbers, and backup codes remain current.
Security and privacy details worth understanding
A passkey’s biometric or PIN check happens locally. The service receives proof from the credential, not your fingerprint or face image. The local unlock still matters: anyone who can unlock the device may be able to use its passkeys, so protect the device with a strong screen lock and enable remote-device protection.
Synced passkeys reduce the chance that one broken phone strands you, but they depend on the credential manager’s account, supported platforms, and recovery process. A physical key reduces dependence on one phone and can remain offline, but loss, damage, an incompatible connector, or failure to enroll a spare can create immediate friction. Treat either design as a credential that needs inventory and revocation when it leaves your control.
SMS can remain useful as a temporary recovery route when a service requires it, but it is weaker operationally than a phishing-resistant passkey or hardware key because delivery depends on the telephone network and number ownership. The safest migration is therefore staged: enroll, duplicate, test, document recovery, and only then remove text messages where the account permits it.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
