What Is a Passkey? Set One Up on iPhone in 2 Minutes

A passkey is a sign-in that replaces your password: instead of typing a secret, you confirm with Face ID, Touch ID or your device passcode. Because there is nothing to type, a passkey cannot be guessed, reused on another site or handed to a fake login page.

Checked on 5 November 2026.

How does a passkey work?

A passkey is a pair of keys. The website keeps a public key, which is useless to anyone who steals it. Your device keeps the private key and never sends it anywhere. When you sign in, the site asks your device to prove it holds the private key, and your device answers only after Face ID, Touch ID or your passcode. On iPhone, passkeys are stored in iCloud Keychain, so they reach your other Apple devices with end-to-end encryption.

Why is a passkey safer than a password?

A passkey is safer because it removes the three ways passwords usually leak. It cannot be phished, because each passkey works only on the exact website that created it, so a look-alike page gets nothing. It cannot be reused, because every site gets its own passkey. And it cannot be stolen in a data breach, because the site never stores anything secret. A password, by contrast, can be typed into the wrong page, used on many sites, or leaked from a company's database.

How do you set up a passkey on iPhone in 2 minutes?

Sign in to the account the normal way. Open the website or app of a service that offers passkeys, such as Google, Microsoft or Amazon.

Open its security settings. Look for Passkeys, Sign-in options or Security in your account settings.

Choose Create a passkey. Your iPhone asks to save it; confirm with Face ID, Touch ID or your passcode.

Check that it was saved. On iOS 18 or later open the Passwords app; on older versions go to Settings > Passwords. The account now shows a passkey.

What happens if you lose your iPhone?

Your passkeys are not lost with the phone. Because they sync through iCloud Keychain, they are available on your other Apple devices and on a new iPhone after you sign in with your Apple Account. Keep your Apple Account protected with a strong passcode and two-factor authentication, since it now guards your passkeys too.

Does a passkey replace a VPN?

No. A passkey protects the moment you sign in to an account. A VPN encrypts the connection your phone uses on Wi-Fi and mobile data. They solve different problems, and using both covers more ground than either alone.

Frequently asked questions

Can I use a passkey on a computer that is not mine?

Often yes. Many sites show a QR code on the computer; you scan it with your iPhone and approve with Face ID. The passkey stays on your phone.

Do I still need my password?

At first, yes. Many services keep the password as a backup until you remove it, so keep it in a password manager.

Can a website see my face or fingerprint?

No. Face ID and Touch ID only unlock the passkey on your device. The website never receives your face or fingerprint data.

---

CasperVPN encrypts your internet connection with WireGuard, OpenVPN, IKEv2 and CasperCloak, our own protocol, on iPhone and iPad (Mac app coming). Learn more in Two-factor authentication: which accounts first or Download CasperVPN →