Passkeys are more convenient, but are they safe?
Full Writeup
How Do Passkeys Work?
- Passkeys let you sign in with your device’s unlock method, like biometrics or password – password and multi-factor authentication are eliminated.
- The digital key is stored on your device and synced to your cloud account (like iCloud or Password Manager).
Risks:
- If someone has your device and knows your device password, they can access all your accounts. This is common in abusive relationships.
- Once logged in to iCloud or your password manager, most devices won’t ask you to re-authenticate – so anyone with access to your unlocked device can log in everywhere.
- Many accounts still keep password backups, meaning phishing and password theft are still possible.
Should You Use Passkeys?
- Great for low-risk users who struggle with managing dozens of passwords and 2FA codes.
- For high-risk users, it’s safer to use:
- Strong passwords stored in a password manager
- Multifactor authentication in a separate authenticator app
