What Are Passkeys?

Passkeys are the next evolution of authentication, developed by the FIDO Alliance and supported by Apple, Google, and Microsoft. They replace traditional passwords with public-key cryptography.

When you create a passkey, your device generates a key pair: a private key (stored securely on your device) and a public key (sent to the website). When you log in, your device proves it has the private key through a cryptographic challenge — without ever sending the key across the network.

Passkeys are: • Phishing-proof — tied to a specific website domain • No memorization needed — unlocked with biometrics or device PIN • Unique per site — automatically • Synced across devices — via iCloud Keychain, Google Password Manager, or 1Password

Passkeys vs Passwords

| Feature | Passwords | Passkeys | |---------|-----------|----------| | Phishing susceptible | Yes | No | | Requires memorization | Yes | No | | Can be reused across sites | Yes (bad practice) | Automatically unique | | Vulnerable to data breaches | Yes | No (server stores only public key) | | Requires special hardware | No | No (built into modern devices) | | Works offline | Depends | Yes | | Universal support | Yes | Growing (major sites support them) | | Recovery if device lost | Password reset | Via synced backup or recovery password |

Passkeys are superior in nearly every security dimension. The primary limitation is adoption — not all websites support them yet, though adoption is accelerating rapidly.

What This Means for You Now

Enable passkeys wherever available — Google, Apple, Microsoft, GitHub, Amazon, and many others support them.

Keep your password manager — you'll need passwords for the many services that don't yet support passkeys.

Keep your dead man's switch — passkeys don't solve the emergency access problem. Your encrypted vault should contain your device PINs and recovery keys so your family can access passkey-protected accounts through your devices.

Plan for recovery — passkeys synced to iCloud or Google are accessible from your other devices. But if all your devices are lost, you'll need recovery codes. Store them in your ZeroLatch vault.

The password era is waning, but the transition will take years. Maintain both systems for now.