THE SHORT VERSION
A passkey lets you sign in the same way you unlock your phone or computer. There’s no password to type, so a fake website has nothing to collect.
A familiar situation
Imagine a site you use asks whether you’d like to create a passkey. It sounds technical. In practice it means signing in the way you already unlock your phone.
1. What a passkey is
A passkey is a sign-in credential based on FIDO standards. It’s stored on your phone, computer or a security key, and it replaces your password for that site.
2. How you use it
To sign in, you approve with the same method you use to unlock your device, such as a fingerprint, a face scan or a PIN. Your fingerprint or face stays on your device; the site only learns that the check passed.
3. Why it resists phishing
The FIDO Alliance describes passkeys as phishing resistant. Because there’s no password to type or hand over, a look-alike website has nothing useful to capture.
One thing to try today
Next time a trusted site offers a passkey, try creating one on your own phone, then sign out and sign back in with it.
Read more from trusted sources
General educational guidance. If you believe someone has stolen your information or money, use the official recovery guidance at IdentityTheft.gov or ReportFraud.ftc.gov.
Pass a useful tip along.
Share the guide or copy its short takeaway for your own post.
LinkedIn
X
Reddit