What is a passkey and should my business use them?

A passkey is a modern replacement for a password that lives on your device and unlocks with your fingerprint, face or PIN - and because there is no password to phish, steal or reuse, it shuts down the most common way accounts get broken into:

  • How it works - your device holds a private key and proves your identity to the website without ever sending a secret that can be intercepted.
  • Why it beats passwords - nothing to phish, nothing to reuse across sites, and nothing in a database for attackers to steal.
  • Where you can use them now - Google, Microsoft, Apple and a growing list of services support passkeys today.
  • The catch - support is not universal yet, so passwords and MFA will coexist with passkeys for a while.

Turn passkeys on wherever they are offered for your most important accounts - they are stronger than any password plus SMS code.