What are passkeys? They’re a way to sign in with your phone’s fingerprint, face unlock or screen lock instead of typing a password or waiting for an SMS code. Google, WhatsApp and Amazon already support them, and setting one up takes about two minutes per account.
The big win is that a passkey can’t be typed into a fake website, which is how most Indian phishing scams work. There’s one situation where you shouldn’t create one, though, and it’s in section 4.
⚡ Key takeaways
- A passkey lives on your phone and unlocks with your fingerprint, face or screen lock. There’s nothing to type, so there’s nothing to phish.
- Google: go to myaccount.google.com/signinoptions/passkeys and tap Create a passkey. Needs Android 9 or iOS 16 and above.
- WhatsApp: Settings > Account > Passkeys > Create passkey. It replaces waiting for the 6-digit SMS code when you register.
- Amazon: Your Account > Login & Security > Passkeys > Set up. Amazon says over 500 million customers have turned them on.
- Never create a passkey on a shared phone or family laptop. Anyone who can unlock it can get into your account.
What Are Passkeys, in Plain Words?
A password is a secret you know and type. A passkey is a secret your phone keeps and never shows to anyone, not even you.
Apple’s support page on passkey security explains how it works. Each account gets its own pair of keys. The website keeps a public key, and the private key stays on your device.
When you sign in, your phone proves it has the private key after you approve with Face ID, Touch ID or your passcode. No password travels over the internet, so there’s nothing for a hacker to steal from the website or capture from you.
Google’s help page puts the benefit simply: passkeys “can’t be shared, copied, written down, or accidentally given to someone else.” That’s why they resist phishing.
Why Passkeys Matter for Indian Phone Users
Most scams that empty accounts in India work by getting you to type something somewhere you shouldn’t. A fake KYC page, a fake courier link, a caller asking you to read out an OTP. A passkey breaks that chain, because there’s no code or password for you to hand over.
It also saves time. WhatsApp’s passkey replaces waiting for the 6-digit SMS code when you register your number or restore your account, WABetaInfo explains. That’s handy when you’re on a weak network and the SMS takes forever.
Adoption is already big. WhatsApp says more than a billion people have set up a passkey on the service, Mobile ID World reported in August 2026.
💡 Pro tip
Passkeys don’t remove your password. On Google, they’re added as a sign-in option. Your password still works, and if you use 2-Step Verification, a passkey can count as the second step.
Also readIs My Phone Hacked? 9 Checks for Android and iPhone Users How to Set Up Passkeys: Google, WhatsApp, Amazon
Google account (Gmail, YouTube and more)
- Open myaccount.google.com/signinoptions/passkeys on your phone.
- Tap Create a passkey.
- Unlock your phone with your fingerprint, face or screen lock.
- Repeat on any other device you use regularly, such as your laptop.
Google lists the requirements: Android 9 or iOS 16 and above on phones; Windows 10, macOS Ventura or ChromeOS 109 and above on computers; and a screen lock turned on.
- Update WhatsApp.
- Go to Settings > Account > Passkeys.
- Tap Create passkey, then Continue, and confirm with your screen lock.
On Android you need Android 9 or later with a password manager such as Google Password Manager turned on. On iPhone, you need an iPhone 8 or newer on iOS 16 or later. WhatsApp is rolling the feature out in stages, so you may not see it yet.
Amazon
- In the Amazon app or website, open Your Account > Login & Security.
- Tap Set up next to Passkeys and follow the prompts.
Amazon says passkeys work on the web, the iOS and Android shopping apps and Audible, and that signing in this way is six times faster than a password. More than 500 million customers have enabled them, per its October 2026 update.
| Service | Where to set up | Unlocks with | Our take |
|---|---|---|---|
| myaccount.google.com/signinoptions/passkeys | Fingerprint, face, screen lock | Do this first: it protects Gmail and most of your logins | |
| Settings > Account > Passkeys | Screen lock | Saves waiting for SMS codes on a new phone | |
| Amazon | Your Account > Login & Security | Fingerprint, face, screen lock | Useful during sale season when phishing peaks |
| Apple Account / iCloud | Synced via iCloud Keychain | Face ID, Touch ID | Passkeys sync across your Apple devices |
The Catch: Shared Phones and Lost Phones
Passkeys need care in Indian homes, where one phone or laptop often gets passed around.
⚠️ Watch out
Google says don’t create a passkey on a shared device. Anyone who can unlock that device can access your account, even after you sign out. If your kids or parents know your phone PIN, they can also use your passkeys.
So before you start, check two things. Is your screen lock a PIN only you know? And is this device really yours alone? If not, keep using your password plus 2-Step Verification on that device.
Lost your phone? Google’s advice is to sign in on another device and remove the passkey from the lost or stolen phone. On Apple devices, passkeys sync through iCloud Keychain with end-to-end encryption, so a new iPhone gets them back once you sign in. Our guide on setting up a new phone covers the rest of that process.
Should You Switch? A Quick Checklist
- Set a strong screen lock first. A 6-digit PIN beats a simple pattern that others have seen you draw.
- Start with Google. It protects Gmail, which is the reset key for most other accounts.
- Add WhatsApp next, then Amazon if you shop there a lot.
- Keep your password and 2-Step Verification on. Passkeys sit alongside them on most services.
- Review passkeys when you change phones. Delete old ones from the account settings.
- Don’t set up passkeys on office or shared family devices.
If you’re unsure whether someone already has access to your accounts, run through our checklist on whether your phone is hacked first.
Also readDigital Arrest Scam: How It Works and the 3 Steps That Stop It Our Verdict: Worth Turning On?
✅ Our verdict
Yes, on your own phone. Passkeys are faster than passwords and OTPs, and they shut down the most common scam trick: getting you to type a secret into a fake page. Turn them on for Google first, then WhatsApp and Amazon. Skip them on any device other people can unlock.
They aren’t magic. Palo Alto Networks researchers have described ways malware can abuse synced Google passkeys, as Mobile ID World noted, so basic phone hygiene still matters: updates, Play Protect, no apps from random links. But compared with an SMS OTP that a scammer can talk you out of, a passkey is a clear upgrade.
Frequently Asked Questions
What are passkeys in simple terms?
A passkey is a sign-in key stored on your phone or computer. You approve it with your fingerprint, face or screen lock, so you don’t type a password or OTP.
Are passkeys safer than OTP?
For phishing, yes. An OTP can be read out to a scammer or typed into a fake site. A passkey’s private key stays on your device and there’s no code for you to hand over.
What happens to my passkey if I lose my phone?
Sign in to your account from another device and remove the passkey linked to the lost phone. On Apple devices, passkeys sync through iCloud Keychain and come back when you sign in on a new device.
Can I still use my password after creating a passkey?
On Google, yes. Passkeys are added alongside your existing sign-in methods. You can turn off “Skip password when possible” if you prefer to use your password by default.
Does WhatsApp support passkeys on iPhone?
Yes, on iPhone 8 or newer running iOS 16 or later. Go to Settings > Account > Passkeys.
The Bottom Line
So, what are passkeys? A faster, phishing-proof way to sign in using the lock you already use on your phone. Spend five minutes tonight setting one up on your Google account, then WhatsApp. Just keep them off shared devices.
Keep reading
Read nextIs My Phone Hacked? 9 Checks for Android and iPhone UsersRead nextDigital Arrest Scam: How It Works and the 3 Steps That Stop It
Read nextNew Phone Setup: 9 Things to Do Before You Use ItSources
- Google Account Help: Sign in with a passkey
- Apple Support: About the security of passkeys
- WABetaInfo: What are passkeys on WhatsApp and how to set them up (June 2026)
- Amazon: Passwordless sign-in with passkeys (updated 20 Oct 2026)
- Mobile ID World: WhatsApp says a billion people sign in with a passkey (Aug 2026)