What Is a Passkey?
A passkey is a cryptographic key stored by your device or password manager, unlocked with a fingerprint, face, or PIN. On the web it replaces passwords. In crypto wallets it sometimes replaces the thing you type to approve a spend, and in account-abstraction wallets it can be the actual signer. It is a huge upgrade over "password123" and a smaller upgrade than people hear.
How It Actually Works
- The site never sees a shared secret. It sees a signature from a key that does not leave the authenticator. Phishing a fake domain should fail, because the passkey is bound to the real origin.
- Synced passkeys (iCloud, Google, a password manager) are convenient and introduce a cloud account as a new master key. Device-bound passkeys die with the device unless you added a second one.
- A passkey on a smart account is not automatically a hardware wallet. It depends whether the private material can be extracted, synced, or phished via the cloud account.
Risks and Common Mistakes
- One device, one passkey, no backup signer. That is a single point of failure with a friendlier face.
- Treating "Sign in with Apple" as self-custody. Sometimes it is just an API key the vendor holds.
- Ignoring account recovery on the cloud vendor. If email takeover gets the passkey vault, the chain will honor the signature.
When It Matters
New-wallet onboarding and any "no seed phrase" pitch. Add a second factor you control. Pair with social recovery only after you trust the guardians.
Related Terms
Glossary · Learn · Resource Library · Return to Official Home Page
Copyright © 2026 Crypto Guidance Inc.