Sign in with a passkey instead of a password

Passkeys are a simple and secure alternative to passwords. With a passkey, you can sign in to your Google Account with your fingerprint, face scan, or device screen lock, like a PIN.

Passkeys provide the strongest protection against threats like phishing. Once you create a passkey, you can use it to easily sign in to your Google Account, as well as some third-party apps or services, and to verify it's you when you make sensitive changes.

Important:

  • If your account has 2-Step Verification or is enrolled in the Advanced Protection Program, a passkey bypasses your second authentication step, since this verifies that you have possession of your device.
  • Your biometric data, used for fingerprint or face unlock, stays on your device and is never shared with Google.

Check what you need to create a passkey

You can create passkeys on these devices:

  • A laptop or desktop that runs at least Windows 10, macOS Ventura, or ChromeOS 109
  • A mobile device that runs at least iOS 16 or Android 9
  • A hardware security key that supports the FIDO2 protocol

Your computer or mobile device also needs a supported browser like:

  • Chrome 109 or up
  • Safari 16 or up
  • Edge 109 or up
  • Firefox 122 or up

To create and use a passkey, you must enable the following:

  • Screen lock
  • Bluetooth
    • This applies if you want to use a passkey on a phone to sign in to another computer.
  • For iOS or macOS: You must enable iCloud Keychain.
    • When you set up a passkey on your Apple device, it prompts you to enable your iCloud Keychain if not set up already. For more info on how to set up iCloud Keychain, go here.

Tip: To ensure the best passkeys experience, make sure your operating system and browser are up to date.

Based on your operating system and browser, you may not be able to create or use passkeys while in Incognito mode.

Passkeys for Google Workspace

If you have a Google Workspace account through your school or employer, you may not be able to sign in to your account with just a passkey. You can still create passkeys on your devices, but they may only be used as a second factor in 2-Step Verification, in account recovery, and for some sensitive actions in your account that require Google to re-verify your identity.

In the "Skip password when possible" account settings page, you can find whether your admin allows you to sign in with just a passkey.

Workspace admins can learn more here.

Set up passkeys

Important: When you create a passkey, you opt in to a passkey-first, password-less sign-in experience. Create passkeys only on personal devices that you control. Even if you sign out of your Google Account, once you create a passkey on a device, anyone who can unlock the device can sign back into your Google Account with the passkey.

To set up a passkey, you may need to sign in to your Google Account or verify it’s really you.

Create a passkey
To create a passkey on the phone or computer you’re on:
  1. Go to https://myaccount.google.com/signinoptions/passkeys.
  2. Tap Create a passkey and then Continue.
    • You'll be required to unlock your device.

To create passkeys on multiple devices, repeat these steps from those devices.

To create a passkey on an external FIDO2 capable USB security key:

  1. Go to https://myaccount.google.com/signinoptions/passkeys.
  2. Tap Create a passkey and then Use another device.
  3. Follow on-screen instructions.
    • You'll be required to insert your hardware security key and enter its PIN or touch the fingerprint sensor on the key.

Tips:

  • Once you create your first passkey, the next time you sign in on any device that supports passkeys, you'll be prompted to create a passkey on that device.
  • If you don't want other users to access your account, do not create a passkey on a shared device.

Use your passkey to sign in

To sign in to your account on a device where you already created a passkey:

When you sign out of an Android device, you need to sign back with an alternate method. If you perform any sensitive actions while you're signed in that require you to re-verify your identity, you can use the passkey on the Android device itself.

On other non-Android devices, you can use your passkey to sign back into your account as well as to re-verify your identity while you’re already signed in.

  1. On the Google sign-in page on your device, enter your username.
  2. If you previously created a passkey for your account on that device, Google will prompt you to verify your identity with that device's passkey.
    • Follow the on-screen passkey instructions to unlock the device and verify your identity.
      • The exact UI will vary depending on your operating system and browser.
    • In some rare cases, you may be asked for your password even if you have a passkey on the device.
      • To try to trigger the prompt for your passkey, you can use the "Try another way" option.
To sign in to your account on a computer, you can use a passkey created on a mobile device:
If you have a passkey on an Android or iOS mobile device, you can use that passkey to sign in to a different mobile device or computer.
  1. On the Google sign-in page on your computer, enter your username.
  2. Below the password field, click the Try another way link.
  3. Click Use your passkey.
  4. On your screen, find the QR code.
    • If you want to use a passkey that was created on a hardware security key, you'll have an option to select "USB security key" or equivalent.
  5. To scan the QR code, use your phone's built-in QR code scanner app.
    • For iOS: You can use the built-in camera app.
    • For Google Pixel phones: You can use the built-in QR code scanner.
    • For other Android devices: If you can't scan the QR code with the native camera app or the system QR code scanner, you can use Google Lens.
  6. On your phone, tap Use passkey.
    • To verify your identity on your phone, you'll be prompted for your fingerprint, face unlock, or phone PIN.
    • The next time you sign in with this computer and phone combination, you'll automatically get a notification on your phone to complete the identity verification process.

Tip: After you sign in, you may be asked to create a passkey on the computer. If you don't want other users to access your account, do not create a passkey on a shared device.

Check your passkeys

  1. Go to https://myaccount.google.com/signinoptions/passkeys.
  2. You may be asked to verify your identity.
    • Tip: If you're signed into multiple accounts, make sure you are verifying your identity for your desired account.

If your account already has passkeys, they’re listed here.

  • Tip: If you have an Android phone signed in with this account, you may have passkeys registered automatically for you.

Remove or opt out of passkeys

Remove a passkey
If you lost a device where you created a passkey, or created a passkey on a shared device by mistake, you should invalidate the passkey for use with your Google Account.

Remove a passkey you created

  1. Go to your Google Account.
    • You may need to sign in.
  2. Select Security.
  3. Under "How you sign in to Google," tap Passkeys.
  4. Select the passkey you want to remove.
  5. Tap the icon.

Remove a passkey automatically created by Android

To remove a passkey that was automatically created on your Android device, you need to remove the device from your Google Account.

  1. Go to your Google Account.
  2. On the left navigation panel, select Security.
  3. On the Your devices panel, select Manage all devices.
  4. Select the device and then Sign out.
  5. If multiple sessions appear with the same device name, they could all come from the same device or multiple devices. If you want to make sure there’s no account access from a device, sign out of all the sessions with this device name.

Tip: You can check google.com/devices to review all devices with access to your account.

Opt out of signing with passkeys
When you opt out of passkey sign-in, you'll still retain all passkeys on your account. All future sign-ins will require your password and optional 2-Step Verification depending on configuration.
To opt out of passkeys as a sign-in method and go back to your earlier sign-in method, change this preference in your account settings.
  1. Go to your Google Account.
    • You may need to sign in.
  2. Select Security.
  3. Turn off Skip password when possible.

Tip: When you first create a passkey, you opt in to a passkey-first, password-less, sign-in experience. To sign in to your Google Account without a passkey and use another sign-in method, tap Try another way. If you choose "Try another way" often, Google will offer the passkey challenge less frequently in the future to reflect your implied preferences. You can change this by repeatedly signing in with passkeys.

Fix a problem about a lost or missing passkey

Lost or stolen device
  1. On a device you’re able to access, sign in to your Google Account.
  2. Remove the passkey associated with the lost or stolen device.
Missing or unavailable passkey

If you have passkeys on your account but aren't offered a passkey during sign-in, make sure that:

  • The device with the passkey has the screen lock enabled
    • If your device's screen lock is disabled, you will not be able to use the passkey on that device until you enable the screen lock again.
  • The "Skip password when possible" toggle is on in your security settings at myaccount.google.com/security.


To sign in to your Google Account without a passkey, tap Try another way to skip the passkey challenge and go back to your earlier sign-in choices.

Tip: If you choose "Try another way" often, Google will offer the passkey challenge less frequently in the future to reflect your implied preferences. You can change this by repeatedly signing in with passkeys.

Related resources

Search
Clear search
Close search
Google apps
Main menu
8828628440686974972
true
Search Help Center
true
true
true
true
true
70975