What Is a Passkey? The Password Replacement, Explained

A passkey is a pair of cryptographic keys that replaces your password. The public key goes to the website; the private key stays locked in your password manager (or phone), protected by your biometrics. To sign in, your device proves it holds the private key — nothing typed, nothing to intercept.

Why they're better: there's nothing to phish. A fake login page can't steal a passkey because the private key never leaves your device and only responds to the real site's domain. Breaches stop mattering too — the server holds only a public key, useless to attackers.

Using one feels like Apple Pay for logins: tap 'Sign in with passkey', glance at Face ID, done. No codes, no password typing, works across synced devices.

All major managers here support passkeys — 1Password, Bitwarden, Proton Pass, Dashlane, NordPass, Apple Passwords and Google Password Manager can create, store and sync them. (RoboForm, Zoho Vault and TotalPass are still catching up.)

Should you switch everything to passkeys today? Enable them where offered (Google, Apple, GitHub, PayPal lead), but keep your password manager — most sites still need passwords, and your manager is now your passkey home too.