Why you can trust ZDNET
:ZDNET independently tests and researches products to bring you our best recommendations and advice. When you buy through our links, we may earn a commission.Our process
'ZDNET Recommends': What exactly does it mean?
ZDNET's recommendations are based on many hours of testing, research, and comparison shopping. We gather data from the best available sources, including vendor and retailer listings as well as other relevant and independent reviews sites. And we pore over customer reviews to find out what matters to real people who already own and use the products and services we’re assessing.
When you click through from our site to a retailer and buy a product or service, we may earn affiliate commissions. This helps support our work, but does not affect what we cover or how, and it does not affect the price you pay. Neither ZDNET nor the author are compensated for these independent reviews. Indeed, we follow strict guidelines that ensure our editorial content is never influenced by advertisers.
ZDNET's editorial team writes on behalf of you, our reader. Our goal is to deliver the most accurate information and the most knowledgeable advice possible in order to help you make smarter buying decisions on tech gear and a wide array of products and services. Our editors thoroughly review and fact-check every article to ensure that our content meets the highest standards. If we have made an error or published misleading information, we will correct or clarify the article. If you see inaccuracies in our content, please report the mistake via this form.
Long gone are the days of being able to use and reuse rubbish passwords like p455w0rd123. Now, all of your online accounts need to be protected by passwords that are both complex and unique.
And you've got to be ever vigilant in case one of your many passwords is compromised.
There's got to be a better solution. And there is -- passkeys.
What are passkeys?
Passkeys are an authentication method for websites and apps that were first popularized by Apple in June 2022 when the company added support in iOS and MacOS. However, it's not an Apple technology. Passkeys is a standard that's promoted by Google, Apple, Microsoft, the World Wide Web Consortium, and the FIDO Alliance.
Passkeys are cryptographic keys and each passkey consists of two keys, a public key that's registered with the online service or app, and a private key that's stored on a device, such as a smartphone or a computer.
That might sound complicated, but passkeys have been designed to be easy to use. In fact, to log in with a passkey, you'll be using your face, a fingerprint, or a PIN in much the same way that you unlock your smartphone.
The advantage of passkeys is that even if a hacker gets their hands on a website's public key, the user's account is still locked because they don't have access to the private key on the user's device.
The screenshot above proves the benefits: no passwords in sight, nothing that needs to be remembered, and nothing to accidentally hand over to a hacker.
Passkeys can also help you get around the issue of having to synchronize passwords between your devices.
Say you normally log in to your Google account using a smartphone, but you want to log in using a laptop. That's no problem, even if the passkey isn't synchronized with the laptop, as long as the smartphone is within Bluetooth range of the laptop and the user approves the login.
What's even cooler is that the passkey isn't transferred between the smartphone and laptop, but after confirming the login, the user instead gets the opportunity to create a passkey on the laptop.
Isn't logging in to a website or app with your fingerprint or face risky?
No, because no biometric information is sent to the website or app that you are accessing; instead, this biometric information is only used to unlock the passkey on your device.
The biometric information never leaves the device.
What do I need to use passkeys?
Here are the system requirements for passkeys:
A system running at least Windows 10, MacOS Ventura, or ChromeOS 109
A smartphone or tablet running at least iOS 16, iPadOS 16, or Android 9
The computer or mobile device you are using will also need a supported browser, such as:
Chrome 109 or greater
Safari 16 or greater
Edge 109 or greater
The major tech players -- Apple, Google, and Microsoft -- all have more information about how to use passkeys on their platforms.
Which websites support passkeys?
You can find a list of websites that support passkeys at passkeys.io.
Some well-known websites and apps that support the technology include Adobe, Amazon, Google, GitHub, PayPal, TikTok, Nintendo, WhatsApp, Shop by Shopify, and X. Recently, we've seen eBay and Uber adding support for passkeys.
In fact, Google is clear that its plan is to make "passwords a rarity, and eventually obsolete".
Not ready to use a passkey for Google yet? You can skip this option and continue to log in to your account the old way.
Do apps support passkeys or do I have to visit the website using the browser? What about iOS vs. Android?
Passkeys should work, whether you use a service that's via the browser or an app.
But the experience might not be universal. For example, Amazon has just rolled out support for passkeys, but support in the app is currently only available for iOS users. These are early days for passkeys, and soon we can expect accross-the-board support.
How can I get a feel for how passkeys work?
If you're not yet ready to take the plunge and start using passkeys, the best way to experiment with how they work is to use the demo over on passkeys.io. It will guide you through the process of setting up a passkey and how to use it to log in to a site.
If you're ready to take the plunge, a great place to start is by securing your Google Account with a passkey. Not only has Google made the process easy, but there's also extensive documentation available.
Are passwords dead?
Unfortunately, we're a long, long way away from the death of passwords. Passkeys, much like hardware security keys, offer a way for you to harden accounts and online services that support the feature.