A passkey lets you approve a sign-in using a supported device’s unlock method instead of typing the account password. Setting one up is a good opportunity to check which device you are trusting and how you would recover access if it went missing.
1. Choose a device you control
Create the passkey only on a device you personally own and use. Google warns that someone who can unlock that device may be able to access your account with its passkey, even after you sign out. Do not set one up on a borrowed or shared computer just to make today’s login easier.
2. Review recovery before changing sign-in
Before starting, check that the account’s recovery details are still yours and that you understand its recovery process. Keep any existing recovery information secure. Avoid removing other sign-in methods while you are still learning how the new one works.
Write down the questions you need answered: which device or credential manager will store the passkey, and what happens if that device is replaced? The answers depend on your setup, so read the prompts instead of assuming every passkey works the same way.
3. Create the passkey through Google
While signed in to the intended account, open Google’s passkey settings. Choose Create a passkey and follow the device-unlock prompts. Google also supports compatible security keys through the alternative-device option. Its official passkey guide explains setup and requirements.
4. Test before relying on it
Try signing in again on a device you control and confirm you reach the correct account. Keep another working session available while you learn the process. A successful creation message and a successful sign-in are two useful checks.
Record where you created the passkey, without recording a device PIN in the same note. This makes future device replacement or account cleanup less confusing.
Keep the rest of the account healthy
Protect the device’s screen lock and review access when selling, replacing, or losing a device. Follow the provider’s instructions for removing credentials you no longer control.
A new sign-in method does not replace ongoing account maintenance. Use our account security checklist to review recovery details and unfamiliar activity. If a message is pressuring you to change your login, verify it first with our suspicious-message checks.
Was this helpful?
Help us make our guides more useful.
No sign-in needed. This browser remembers your response for up to 180 days.
