How to set up a passkey for Google

Google has said for some time that it believes the future of online security is with passkeys, which replace traditional alphanumeric passwords. It added support for passkeys across Google services earlier this year, but now, it's positioning passkeys as the default login method for personal Google accounts. Since it's nearly impossible to remember all those passwords yourself, so most people end up using the same password across many accounts or utilizing the best password managers. Starting Oct. 10, 2022, Google began prompting users to create and use passkeys by default, ditching their password. If you're curious what this all means for your sign-in process, or how to create a passkey, you're in the right place.

What are passkeys?

Passkeys are alternative authentication methods developed by the FIDO Alliance, an open-industry collaboration supported by the biggest tech companies. Typically, the most common form of authentication is two-factor, which asks a user for their password and a code either sent to a phone number. Other methods, like using an authentication app or a physical key, are more secure, but also more of a hassle. FIDO's security keys cut out the need for a password in favor of a passkey, which doesn't share the same vulnerabilities as passwords and SMS verification codes.

In simple terms, a passkey is an authentication method that is connected to the passcode or biometric security of another device, like Face ID on an iPhone or facial recognition on an Android phone. Your face or fingerprint will authenticate that it's really you on your phone, and a passkey will be sent to the place you're trying to sign into.

What products and services work with passkeys?

To set up and use passkeys on a mobile device, it'll need to be running at least Android 9 or iOS 16. Desktops must be running Windows 10 or macOS 13 Ventura or later. You must also use a supported browser or later, including Safari 16, Google Chrome 109, and Microsoft Edge 109. Any FIDO-certified security key can also be used, which includes NFC and USB-based physical keys.

How do passkeys work as the new default sign-in method?

Essentially, Google's move to make passkeys the default option for sign-in on personal accounts means that you'll be prompted to create a passkey. The next time you sign into your Google account, you'll start seeing the option to create a passkey as an alternative to passwords. However, Google isn't forcing all users to start using passkeys immediately, so you can still use your password to log in. There's a new option called Skip password when possible in each user's personal account settings, and it's enabled by default. To keep using your password uninterrupted, you can turn off this setting by following the steps below.

How to turn off passkeys as the default sign-in method

1. Navigate to your Google profile.

2. Select the Security tab.

3. Click the Skip password when possible tab.

4. Select the toggle beside Skip password when possible to turn off passkeys as the default sign-in method.

If you'd rather use passkeys and the increased security benefits that come with them, keep reading to set up passkeys for Google.

How to set up passkeys with Google

Passkeys can be created with the individual site or app you're trying to log into, but it's easier to set them up through your Google account. Android devices automatically create passkeys for devices when you sign into your Google account, so you might already have some set up. Here's how to do it.

1. Navigate to your Google profile and head to Manage your Google Account > Security > Passkeys.

2. Tap the blue Use passkeys button.

3. On a device that isn't already set up as a passkey (Android devices automatically create passkeys when you're signed in) press Create a passkey.

4. Tap the Continue button to add the device you're using as a passkey.

5. Tap Continue to set up the passkey through iCloud Keychain or Android.

Why you should use passkeys for your Google account

Your phone's passcode and biometric security methods are some of the best authentication methods out there because somebody needs to physically access your phone to create one. Plus, all the best smartphones have quality biometric security methods. Since Google accounts can be used to sign into a ton of different websites and apps, it's essential to make sure your Google account is locked down.