Passwords have been part of computing for decades, but they also create persistent security and usability problems. People forget them, reuse them across multiple websites or accidentally enter them into fraudulent websites. One of the technology industry's major alternatives is the passkey, which is designed to provide a simpler and more phishing-resistant way to sign in.
Instead of typing a traditional password, a passkey allows a person to approve a login using the same method used to unlock a trusted device. This might be a fingerprint, facial recognition, a PIN or a physical security key. Passkeys use cryptographic credentials associated with the website or application rather than relying on a reusable password that has to be transmitted and remembered.
For computer users, this means technologies already built into many modern laptops are becoming increasingly useful for online security. A fingerprint reader, facial-recognition camera or Windows Hello PIN can be used to approve compatible passkey sign-ins. Microsoft also supports storing passkeys locally with Windows Hello, on mobile devices, in compatible password managers or on physical security keys.
Passkeys are particularly significant because they are designed to resist common phishing attacks. The authentication credential is associated with the legitimate website or application, reducing the risk of a user accidentally handing over a password through a convincing fake login page. Google similarly describes passkeys as a more secure alternative to passwords and supports fingerprint, facial recognition and device screen locks for authentication.
Passwords are unlikely to disappear everywhere at once, but authentication is clearly moving toward a more passwordless future. As fingerprint readers, facial-recognition cameras and hardware security keys become increasingly common, understanding passkeys can help both consumers and businesses improve account security while making the everyday sign-in process easier.