Google Promotes Passkeys as More Secure Alternative to Passwords

Google is shifting its focus towards passkeys as a more secure alternative to passwords. By 2026, roughly 75% of users who tried passkeys have kept them enabled on at least one account, with about 90% recognizing the term 'passkey'. This shift is driven by the increasing threat of phishing attacks, which can bypass traditional password and two-factor authentication methods.

Passkeys work by using a device's built-in biometric or PIN unlock to verify identity. They are tied to a specific device and site, making them more secure than passwords. Google recommends setting up passkeys in addition to 2-Step Verification, which protects accounts on devices or browsers where a passkey hasn't been registered.

The process of setting up passkeys involves several steps, including running the Google Security Checkup, locking down recovery email and phone, confirming passkey support on devices, creating a passkey on desktop and mobile, adding a hardware security key as a backup, and turning on 2-Step Verification. This guide provides a step-by-step walkthrough for setting up passkeys on Google accounts.