How to Use Passkeys on Google and Amazon

The era of remembering complex strings of characters like “P@ssw0rd123!” is finally coming to an end. Major tech giants are rolling out passkeys, a new security standard that is safer and easier than traditional passwords. If you are ready to secure your accounts with biometrics rather than memory, this guide covers exactly how to set up and use passkeys for two of the most important accounts you own: Google and Amazon.

What Is a Passkey?

Before you change your settings, it helps to understand what you are actually setting up. A passkey is a digital credential that is tied to your user account and a website or application. Unlike a password, which is a shared secret stored on a server, a passkey uses public-key cryptography.

The Public Key: This sits on the company’s server (like Google or Amazon).
The Private Key: This stays securely on your device (phone, laptop, or security key).

To log in, your device solves a mathematical puzzle sent by the server. You authorize this action using the screen lock method you already use every day, such as FaceID on an iPhone, the fingerprint scanner on an Android device, or Windows Hello on a PC. You cannot accidentally “leak” a passkey to a hacker because the private key never leaves your device.

How to Set Up Passkeys on Google

Google has been one of the most aggressive adopters of passkey technology. They now encourage users to make passkeys their default sign-in option. Here is how to enable it on your account.

Step 1: Access Your Security Settings

Open your preferred browser (Chrome works best, but Safari and Edge are also supported) and navigate to myaccount.google.com. You will likely need to sign in with your current password one last time.

On the left-hand navigation bar, click on Security. Scroll down until you find the section labeled “How you sign in to Google.” You will see an option for Passkeys.

If you have an Android device logged into this account, Google may have already automatically generated a passkey for that phone.

Step 3: Create a Passkey

Click on Passkeys. You will see a button labeled + Create a passkey. When you click this, a system dialog will pop up asking to verify your identity.

On Mobile: It will ask for your fingerprint or face scan.
On Desktop: It will ask for your computer password, TouchID (Mac), or Windows Hello PIN.

Once verified, the passkey is saved to your operating system’s keychain (iCloud Keychain for Apple users or Google Password Manager for Android/Chrome users).

Step 4: Using the Passkey

The next time you log in to Google, you will enter your email address. Instead of asking for a password, your device will prompt you to verify your identity. For example, an iPhone will simply scan your face, and you will be logged in instantly.

How to Set Up Passkeys on Amazon

Amazon rolled out passkey support slightly later than Google, but the implementation is just as robust. This setup allows you to breeze through checkout without fumbling for credentials.

Log in to your Amazon account on a desktop browser or the mobile app. Hover over “Account & Lists” in the top right corner and select Account. In the grid of options, click on the box labeled Login & security.

Step 2: Locate the Passkey Option

You may be asked to re-enter your password or approve a text notification to enter this sensitive area. Once inside, look for the row labeled Passkeys. Click the Set up button next to it.

Step 3: Add a Passkey

Amazon will display a brief explanation of how passkeys work. Click the yellow Set up button.

Similar to the Google process, your browser or phone will interrupt and ask for biometric confirmation. Scan your fingerprint or face. Amazon will confirm the setup is complete.

Step 4: Manage Your Keys

Amazon allows you to have multiple passkeys. For example, you can set one up on your iPad, one on your Android phone, and one on your Windows laptop. Each device serves as a unique key to open your Amazon account.

Using Passkeys Across Different Devices

One common fear users have is getting locked out if they try to log in from a device that doesn’t have the passkey. Fortunately, the FIDO Alliance (the group behind this tech) created a solution called “Cross-Device Authentication.”

If you are on a laptop that does not have a passkey, but you have your phone nearby, you can still log in:

Select “Use a passkey” on the computer screen.
The computer will display a QR code.
Scan the QR code with your phone’s camera.
Your phone will connect to the computer via Bluetooth to verify proximity (ensuring you are physically there) and authenticate the login.

Third-Party Password Managers

While Google and Apple store passkeys in their own ecosystems, third-party password managers now support them as well. If you use 1Password, Dashlane, or Bitwarden, you can save your passkeys inside these vaults.

This is often a better option for people who mix ecosystems (e.g., you use an iPhone but a Windows PC) because these apps sync the passkeys across all platforms seamlessly. When setting up the passkey on Google or Amazon, simply choose your password manager when the browser asks where you want to save the credential.

Frequently Asked Questions

What happens if I lose my phone?

If you use cloud syncing, you are safe. Apple users sync passkeys via iCloud Keychain, and Android users sync via Google Password Manager. If you get a new phone and log in to your Apple ID or Google Account, your passkeys will automatically restore to the new device.

Do passkeys replace my password completely?

Eventually, yes. For now, both Amazon and Google treat passkeys as an alternative. Your password still exists in the background. If your biometrics fail or you are on a device that doesn’t support passkeys, you can usually click “Try another way” to use your traditional password.

Can I use a hardware key?

Yes. If you prefer physical security, you can store your passkeys on hardware devices like a YubiKey 5 Series or Titan Security Key. When prompted to create a passkey in the Google or Amazon settings, simply plug in your hardware key and touch the sensor to save the credential to the hardware stick instead of your phone.

Is this safer than Two-Factor Authentication (2FA)?

Yes. Traditional 2FA (like SMS codes) can be intercepted by hackers or phished through fake websites. Passkeys are inherently phishing-resistant. If you land on a fake Amazon website, your phone will refuse to offer the passkey because the underlying web address does not match the original credential.