Question & answer

What is a passkey and is it better than a password?

The short answer

A passkey is a way to sign in without a password: your device proves who you are with cryptography, and you confirm with your fingerprint, face, or PIN. Passkeys are safer than passwords because there is nothing to guess, leak, or phish.

With a passkey, your device creates a unique key pair per website: the site gets the public half, the secret half never leaves your device. Signing in is a cryptographic handshake that you approve with biometrics or a PIN. There is no password to steal, and a fake website cannot forge the handshake, which kills phishing in one stroke.

Major services like Google, Apple, Microsoft, and a growing list of stores already support passkeys. The practical question is where you store them: inside the Apple or Google ecosystem, or in a password manager that works across all your devices. Bitwarden, 1Password, NordPass, and Proton Pass can all store and sync passkeys.

For now we live in a transition: some services can go fully passwordless, most cannot yet. A password manager that handles both is therefore the logical home base for the years ahead.

Relevant to this question