Saving and using passkeys

A passkey replaces your password. You sign in by confirming with your fingerprint, your face, your PIN or by unlocking your manager. A passkey only works on the real address of the website, so not on a fake site. You can read how this works in the lesson Passkeys and security keys of the Staying safe online course and in Password manager and passkeys: how to sign in securely.

Where do you store a passkey?

• In your password manager (Proton Pass, 1Password): the passkey goes with you to all your devices that have your manager on them.
• In the account of your phone or computer (Google, Apple, Microsoft): handy if you stick to one brand.
• On a security key: the passkey cannot be taken off it. So always register at least two keys.

Choose one fixed place. That way you will know later where your passkey is.

With Proton Pass

Passkeys work in all versions, including the free version.

1. On a website, go to your account settings and choose to add a passkey.
2. Proton Pass shows a notification. Choose Save passkey and pick an existing login for this website or a new one.
3. Signing in: on the website, choose to sign in with a passkey and confirm in Proton Pass.

On your phone, it works from Android 14 and iOS 17. On Android, set Proton Pass as the service for passwords and passkeys (see Installing Proton Pass in your browser, on your computer and on your phone). On the iPhone, choose Proton Pass as the location when you create a passkey. It does not work yet in Firefox on the iPhone and iPad. Passkeys also do not work on some OnePlus and Oppo phones.

With 1Password

1. On a website, choose to add a passkey.
2. 1Password offers to save it. Choose Save passkey, either in a new item or in the item you already have for this website.
3. Signing in: on the website, choose to sign in with a passkey. 1Password shows a notification: confirm it or press Enter. If you have more than one passkey for this site, pick the right one with the arrow.

On the iPhone, open the Settings app and turn on 1Password under AutoFill for passwords and passkeys. On Android, set 1Password as the autofill service (see Installing and securing 1Password on all your devices). If you do not want 1Password to offer passkeys, turn this off in the extension settings under Autofill & save.

Good to know

• To remove a passkey, you do it in two places: in your manager and in the account settings of the website.
• Others with access to a shared vault can also use a passkey stored in it (see Sharing passwords with your team or family).
• Passkeys are hard to move. They are not included when you import from LastPass or Bitwarden. The 1Password export on your computer does not contain passkeys. If you switch, create a new passkey on those websites (see Switching from LastPass, Bitwarden or another manager and Making a backup or export of your vault).
• Your password often keeps working alongside the passkey. So keep it long and unique.
• A passkey in your manager is only as safe as your manager. Protect your vault with a strong master password and two-step verification.

At WebOké

In Nextcloud you can sign in with a passkey or security key, using passwordless login (see Password manager and passkeys: how to sign in securely). My WebOké does not work with passkeys: there you use your password with a login code by email or an authenticator app (see The login code by email (two-step verification)).