Passkeys are the biggest change to online sign-ins in decades, and your Google account is the best place to start using them. A passkey replaces your password with a cryptographic key stored on your device, unlocked by the same fingerprint, face scan, or PIN you already use. Setting one up takes under two minutes.

On an Android phone, open Settings, tap Google, then Manage your Google Account. Go to the Security tab, find Passkeys and security keys, and tap Create a passkey. Unlock your phone with your fingerprint, face, or PIN when prompted, and confirm. The passkey is created and synced through your Google account, ready for Gmail, YouTube, Drive, and everything else.

On a computer, open Chrome or Edge and go to your Google account's security settings, or visit the passkeys setup page directly. Sign in with your current method if asked, click Create a passkey, and choose where to store it - on the device itself or in your operating system's credential manager. Verify with your device's screen lock and you are done.

On an iPhone or iPad, the passkey saves to iCloud Keychain. Open Safari, go to the Google passkey setup page, sign in, and follow the prompts, authenticating with Face ID or Touch ID. The passkey then syncs across your Apple devices automatically, so you can use it on your Mac and iPad too.

Two setup habits will save you from future headaches. First, create passkeys on more than one device, so a lost phone does not become a lost account. Second, keep your password and recovery phone number in place - a passkey does not delete them, and you will want them if something goes wrong. Google also lets you skip the password entirely on sign-in once a passkey is working.

If you are not yet sure passkeys are right for you, read what a passkey is and whether you should switch for the full breakdown of pros and cons. And the same hygiene applies everywhere: check any app is safe before downloading it, and stop apps from tracking you to lock down the privacy side too.