Passwords get forgotten, reused and leaked.
SMS codes can be read by someone who has taken over your number.
Both can be handed to a scammer who sounds convincing on the phone.
Passkeys fix all three problems.
What is a passkey?
It is a secret stored on your phone instead of in your head.
When you sign in, you unlock it with your fingerprint, face or screen lock.
There is nothing to type and nothing to read out.
Why is it safer?
A passkey only works on the real website or app it was made for.
So a fake login page cannot collect it.
And nobody can trick you into sharing it, because you never see it.
How do I add one to WhatsApp?
Update WhatsApp first.
Open Settings -> Account -> Passkeys.
Tap Create passkey, then follow the prompts.
Confirm with your fingerprint, face or PIN.
When you set up WhatsApp on a new phone later, you can use the passkey instead of waiting for an SMS code.
How do I add one to my Google account?
Go to myaccount.google.com and open Security.
Find Passkeys and security keys, then create one.
Your Android phone may already have one set up automatically.
Where is the passkey kept?
On iPhone, in iCloud Keychain, so it moves to your next iPhone.
On Android, in Google Password Manager, linked to your Google account.
That is why your phone's screen lock matters more than ever.
Do I still need my password?
Keep it, but you will rarely type it.
Some sites still ask for it occasionally, and it helps for account recovery.
Store it in your phone's password manager, not on paper in your wallet.
Things to Remember
- A passkey uses your fingerprint or face instead of a password.
- It cannot be phished or read out to a scammer.
- On WhatsApp:
Settings -> Account -> Passkeys. - On Google: Security, then Passkeys and security keys.
- Keep a strong screen lock, because it protects your passkeys.