Passkeys can replace traditional passwords using your device’s own authentication methods. That way, you can sign in to Gmail, PayPal, or iCloud just by activating Face ID on your iPhone, fingerprint sensor on your Android phone, or Windows Hello on PC.
Built on WebAuthn (or Web Authentication) technology, two different keys are generated when you create a passkey: one stored on the website or service where your account is located and a private key stored on the device you use. to verify your identity.
Of course, if the passkeys are stored on your device, what happens if they are damaged or lost? Since passkeys work on multiple devices, you can have a backup handy. Many services that support passkeys will also authenticate with your phone number or email address, or with a hardware security key if you have one.
On the other hand, some services like Gmail don’t allow you to completely remove the password from your account, just in case. Apple and Google’s password vaults already support them, and so do password managers like 1Password and Dashlane. 1Password also creates online directory listing services that allow users to sign in with a passkey.
