What is a passkey?

A passkey is a sign-in method that replaces passwords with your device's fingerprint, face or PIN. It is easier to use than a password and practically impossible to phish.

How it works

Your device generates a pair of cryptographic keys. The private key never leaves your device. When you sign in, the device proves it holds the key using your fingerprint, face or PIN. Nothing secret is typed or sent.

Why it stops phishing

A passkey only works on the exact site it was created for. A fake page that looks like your bank or Google will not be offered your passkey, and there is nothing to type for the fake page to capture.

What is the Finnish word?

Finnish services use tunnisteavain or pääsyavain, and some keep the English word passkey. They all mean the same thing.

Where can you use one?

Google, Apple and Microsoft already support passkeys. Google: myaccount.google.com, Security, Passkeys. Apple: Settings, your name, Sign-In and Security. Microsoft: account.microsoft.com, Security, sign-in options.

Read next: the five-step scam checklist · scams in Finland

Suomeksi · English home