How to Enable Passkeys on macOS

Passkeys offer a secure and convenient alternative to traditional passwords by allowing login through biometrics such as facial recognition, fingerprints, or a PIN. They provide a modern, phishing-resistant method to protect your accounts. This guide will walk you through the process of activating and managing passkeys on your macOS device, the necessary requirements, and how to use them across different devices.

Passkeys offer a simple and secure way to log in to compatible websites and apps without using passwords, utilizing Face ID or Touch ID for authentication.

Is my macOS device passkey-ready?

To save a passkey on macOS, you must have iCloud Keychain activated. If iCloud Keychain is not enabled when creating a passkey, you will be prompted to turn it on (you can enable it by going to System Settings > Apple ID > iCloud > Passwords and Keychain). Additionally, passkeys require two-factor authentication (2FA) to be enabled for your Apple ID.

Using passkeys on macOS offers several benefits over traditional password-based authentication:

Enhanced Security: Passkeys use public key cryptography, ensuring the private key is securely stored on the device. This greatly reduces the risk of phishing and credential theft. Unlike traditional passwords, which can be stolen or leaked, this cryptographic approach provides a much stronger level of security.

Improved User Experience: Passkeys eliminate the need to remember or manage multiple passwords. On macOS, authenticating with a passkey is as simple as a quick biometric check (like a Face ID or Touch ID) or entering a device PIN, making the process faster and more user-friendly than passwords.

Seamless Cross-Device Compatibility: When a passkey is set up on a macOS device, it is automatically available on all other macOS devices logged in with the same Apple ID. This allows a passkey created on one device to be used across all Apple devices under the same account.

Passkeys can be created and saved for apps and websites that support them. The process for creating and saving a passkey may differ depending on the app, website, or browser, but it generally involves steps like the following:

1. Open a website or app that supports passkeys (e.g. Google, as below, or this passkey demo)

2. Create a passkey through your account settings. Typically, this can be done in the registration process or by navigating to the account settings: Account Settings > Security > Passkeys and Security Keys.

3. Click on Create a passkey:

4. On macOS, the pre-defined iCloud Keychain verification is performed (here: Touch ID). Proceed with the verification, and then select OK.

5. Your passkey is saved. The passkeys you created are stored on your macOS device at Settings > Passwords. There, you can manage and edit them. You can have a passkey and password for the same app or website and find them both under the same account.

With the macOS 15 update in September 2024, Apple introduced the new Passwords-App for macOS 15 and iOS 18. Instead of managing passwords through the operating system, this standalone app now offers more flexibility, including the ability to import passwords and passkeys from other services. It retains all the features of the former iCloud Keychain, but with enhanced management options, data import capabilities, and the added functionality of serving as an authenticator app.

This update does not significantly change the passkey setup process on macOS. The only change is the location where your passkeys are stored and managed. Instead of going to settings > passwords, open the new Passwords-App on your macOS 15 device.

First, you have to unlock the Passwords-App with your password or Touch ID.

In the Passwords-App, click on the Passkeys-Button. There, you can manage and edit all the passkeys you created on Apple devices, linked to your Apple ID. You can have a passkey and password for the same app or website and find them both under the same account.

Passkeys are available across all your devices that are signed in with the same Apple ID, thanks to synchronization via iCloud Keychain. While the exact steps for logging in with a passkey can vary by app, website, or browser, the general process usually includes the following:

1. Open a website or app that supports passkeys and tap the input field for your username (which can be any unique identifier, such as an email address or phone number) on the login screen.
2. Logging in:

• Conditional UI Login: Tap the suggested username that appears at the bottom of the screen or above the keyboard.
• Regular Login: If the username doesn’t automatically appear in the autofill menu or if you prefer to use a different one, manually enter it.

3. Use Face ID or Touch ID to complete the login. If Face ID or Touch ID is not set up on your device, you can use your device passcode (the code used to unlock your device).

On macOS 15, the only change is the logo of the Passwords App.

4. The saved passkey will then automatically complete the login process.

If you want to log in on your current macOS device using a passkey stored on a different device that is not linked to your Apple ID, you may have the option to select “Other Options” (or a similar prompt) instead of “Continue.” Follow the on-screen instructions to proceed, where you can either use another device (like an iPhone, iPad, or Android device) via Cross-Device authentication methods, such as QR codes and Bluetooth, or utilize a security key (e.g., YubiKey). Read more details on Cross-Device authenticationin this blog post.

Using a passkey saved on your macOS device to log in on another Apple device is both easy and secure. Passkeys created on macOS are stored in your iCloud Keychain, ensuring they are accessible across all your Apple devices that are signed in with the same Apple ID. This seamless integration allows you to use passkeys effortlessly between devices, providing a consistent and secure login experience. However, to use your passkeys on non-Apple devices, you’ll need to use a third-party password manager, like described in the following paragraph.

Passkeys created on macOS are saved in your Apple Keychain and can be used on all your Apple devices. But they are not limited to just Apple devices. To ensure your passkeys are accessible across different platforms, you can integrate them with password managers like Dashlane or 1Password:

1. Open Password Manager: Use your preferred password manager that supports passkeys.
2. Set Up Sync: Follow the manager’s instructions to sync passkeys between your devices.
3. Manage Across Devices: Enjoy seamless access to your passkeys regardless of device or platform.

Passkeys created on your pre-macOS 15 devices are stored in the iCloud Keychain linked to your Apple ID. On devices with macOS 15, passkeys are stored in the new Passwords App, allowing seamless use across all your Apple devices signed in with the same Apple ID.

Yes, passkeys can be used across various platforms, including Android. Here’s how it works:

Platform Independence: Passkeys are not limited to a single company’s devices, browsers, or operating systems. Although they are often tied to specific systems by default (like Windows Hello for Windows, Google Password Manager for Android, and iCloud Keychain for iOS and macOS), they are designed for compatibility across different platforms and devices.

Backup and Synchronization: Passkeys are securely backed up and synchronized through services like iCloud Keychain and Google Password Manager. For example, when logging into an account on a Mac, iPhone, iPad, or Apple TV, you can use Face ID or your fingerprint for verification, keeping your passkeys accessible across all Apple devices linked to the same iCloud account. Also Google Password Manager now syncs passkeys across Chrome on Windows, macOS and Android, which is ground-breaking as Google solves cross-platform passkey issues.

Third-Party Managers: Password managers like 1Password and Dashlane enable the use of passkeys across different platforms by facilitating synchronization and management, enhancing cross-device and cross-system usability.

Passkeys are designed to be phish-resistant and cannot be stolen or reused like traditional passwords, making them significantly safer than traditional passwords.

Setting up passkeys on macOS is simple and provides substantial benefits for both security and convenience. By replacing traditional passwords with passkeys, you lower the risk of phishing and benefit from a smoother login experience. Begin your path to a passwordless future by setting up passkeys on your macOS