A passkey is a modern, passwordless authentication method that eliminates the need for traditional passwords. Instead of a password, passkeys use a technology called public-key cryptography, which is both more secure and more user-friendly.
A passkey consists of two related keys:
The public key is stored on the server of the website or application. It is not secret and is worthless on its own.
The private key is stored exclusively on your device and never leaves it. It is protected by your biometric data such as a fingerprint or facial recognition, or by your device PIN.
When signing in, the website verifies whether your private key matches the stored public key. Since the private key never leaves your device, it cannot be intercepted or stolen. Passkeys therefore protect you reliably against phishing attacks and data breaches.
For more information on creating a passkey, see: How do I create a passkey?