Table of Contents
Apple was among the first companies to implement passkey support, and their implementation is among the most polished. If you use an iPhone, iPad, or Mac, setting up passkeys is straightforward – but there are details worth understanding to get the most out of the experience. This guide, part of our passkeys and passwordless authentication resource, walks through everything from initial setup to advanced management.
Prerequisites
Before creating your first passkey, ensure your devices meet the minimum requirements:
- iPhone: iOS 16 or later (iOS 17+ recommended for the best experience)
- iPad: iPadOS 16 or later
- Mac: macOS Ventura (13) or later
- Apple Watch: watchOS 9 or later (for passkey-related notifications)
- iCloud Keychain: Must be enabled for passkey syncing across devices
- Two-factor authentication: Must be enabled on your Apple ID
If you are using an older device or operating system, you can still use passkeys on individual devices but they will not sync across your Apple devices through iCloud Keychain.
Enabling iCloud Keychain
Passkeys created on Apple devices are stored in iCloud Keychain and automatically synced across all devices signed into the same Apple ID. If iCloud Keychain is not already enabled, here is how to turn it on:
On iPhone or iPad
- Open Settings.
- Tap your name at the top (Apple ID).
- Tap iCloud.
- Tap Passwords and Keychain.
- Toggle on Sync this iPhone (or iPad).
On Mac
- Open System Settings.
- Click your name at the top (Apple ID).
- Click iCloud.
- Click Passwords and Keychain.
- Toggle on Sync this Mac.
Once enabled, any passkey you create on one Apple device will appear on all your other Apple devices within seconds. This is what makes the Apple ecosystem particularly convenient for passkey use – you set up a passkey once and it works everywhere.
Creating Your First Passkey
The process varies slightly by website, but the general flow is consistent. Let us walk through creating a passkey for a Google account, which is one of the most common services supporting passkeys.
Step-by-Step: Creating a Passkey on iPhone
- Open Safari and navigate to myaccount.google.com.
- Sign in with your existing password if you are not already signed in.
- Go to Security > How you sign in to Google > Passkeys and security keys.
- Tap Create a passkey.
- Safari will display a prompt asking if you want to save a passkey for your Google account. Tap Continue.
- Authenticate with Face ID or Touch ID when prompted.
- The passkey is created and saved to iCloud Keychain.
That is it. The next time you visit Google’s login page, you will see an option to sign in with your passkey. Tap it, confirm with Face ID or Touch ID, and you are authenticated in under two seconds.
Step-by-Step: Creating a Passkey on Mac
- Open Safari (or Chrome, which also supports passkeys on macOS).
- Navigate to the website’s account security settings.
- Find and click the option to create a passkey.
- macOS will display a system prompt asking you to confirm passkey creation.
- Authenticate with Touch ID (on MacBook Pro, MacBook Air, or with a Touch ID keyboard) or your system password.
- The passkey is saved to iCloud Keychain and synced to your other devices.
What About Non-Safari Browsers?
Chrome on macOS supports passkeys and can store them in iCloud Keychain (as of Chrome 118 and later) or in Google Password Manager. Firefox has added passkey support as well. When you create a passkey in a non-Safari browser, you may be asked to choose where to store it – iCloud Keychain, the browser’s own credential store, or a third-party password manager.
For the most seamless experience across all Apple devices, storing passkeys in iCloud Keychain is the recommended approach. For details on browser-specific behavior, see our guide to Safari, Chrome, and Firefox on Mac.
Using Passkeys to Sign In
Once a passkey is created, using it is simpler than using a password:
On iPhone
- Navigate to the website’s login page in Safari.
- Tap the username or email field. If a passkey exists for this site, iOS will display a passkey autofill suggestion above the keyboard (similar to password autofill).
- Tap the passkey suggestion.
- Confirm with Face ID or Touch ID.
- You are signed in.
The entire process takes two to three seconds. There is no password to type, no authenticator app to open, no code to copy.
On Mac
- Navigate to the login page.
- Click the username field. macOS will offer the passkey through the autofill dropdown.
- Click the passkey option.
- Confirm with Touch ID or your system password.
- You are signed in.
On iPad
The process mirrors the iPhone experience. If the iPad has Face ID, you authenticate with Face ID. If it uses Touch ID (like the iPad Air or iPad mini), you authenticate with Touch ID.
Managing Your Passkeys
Apple provides a central location for viewing and managing all your passkeys.
Viewing Passkeys on iPhone or iPad
On iOS 18 or iPadOS 18 and later:
- Open the Passwords app.
- Unlock it with Face ID, Touch ID, or your passcode.
- Tap Passkeys to see every saved passkey, or search for an account.
- Tap any entry to see its details.
On iOS 17 or earlier, passkeys are listed in Settings > Passwords.
Viewing Passkeys on Mac
On macOS Sequoia and later, open the standalone Passwords app and authenticate with Touch ID or your login password. On macOS Sonoma or earlier, open System Settings > Passwords instead. For a deeper look at Apple’s built-in password management, see our Apple Passwords app comparison.
Deleting a Passkey
If you need to remove a passkey (for example, if you are closing an account), open it in the Passwords app (or your Passwords settings on older systems) and delete it. This removes it from iCloud Keychain and all synced devices. The website will still have your account – you will just need to use a different authentication method (like a password) to sign in.
Using Passkeys with Third-Party Password Managers
Apple’s iCloud Keychain is not the only option for storing passkeys on Apple devices. Starting with iOS 17 and macOS Sonoma, Apple opened its credential provider extension framework to allow third-party apps to store and provide passkeys.
This means password managers like 1Password, Bitwarden, Dashlane, and KeePass-compatible apps can serve as your passkey store. If you already use a password manager for your passwords, storing passkeys in the same app keeps all your credentials in one place.
Setting Up a Third-Party Passkey Provider
- On iPhone or iPad (iOS 18 or later), open Settings > General > AutoFill & Passwords. On a Mac (macOS Sequoia or later), open System Settings > General > AutoFill & Passwords.
- Turn on AutoFill Passwords and Passkeys, then select your preferred password manager alongside or instead of Apple’s Passwords.
- When you create a passkey on a website, you will be prompted to choose which credential store to use.
For PanicVault users, this integration means you can store passkeys alongside your traditional KeePass passwords in a single KDBX database, maintaining the data portability that defines the KeePass ecosystem. For more on this topic, see passkeys and your KeePass database.
Cross-Device Authentication
What happens when you need to sign in on a device that does not have your passkeys? Apple supports cross-device authentication through QR codes and Bluetooth.
Signing in on a Non-Apple Device Using Your iPhone
- On the device where you need to sign in (for example, a Windows PC), navigate to the website’s login page and select the passkey option.
- The site will display a QR code.
- Open the camera on your iPhone and scan the QR code.
- Your iPhone will display a prompt asking if you want to sign in to the website.
- Confirm with Face ID or Touch ID.
- The website on the other device authenticates you.
This works because your iPhone communicates with the other device over Bluetooth Low Energy (BLE) to complete the authentication. The devices need to be physically near each other, which provides an additional layer of security against remote attacks.
For more complex cross-platform scenarios, including using passkeys across Apple, Android, and Windows, see our comparison of Google, Apple and Microsoft passkeys.
Passkeys and Apple’s Ecosystem Advantages
The Apple ecosystem offers several advantages for passkey users:
Seamless sync. iCloud Keychain syncs passkeys across all your Apple devices with end-to-end encryption. No extra setup, no third-party tools needed.
Biometric integration. Face ID and Touch ID provide fast, secure authentication for passkey use. iCloud Keychain is end-to-end encrypted, and on each device the Secure Enclave protects the keys that guard it.
System-level autofill. Passkeys work in Safari, other browsers, and native apps through macOS and iOS system autofill. There is no browser extension to install or maintain.
Apple Passwords app. The standalone Passwords app (iOS 18, iPadOS 18, macOS Sequoia and later) provides a visual interface for managing all your credentials including passkeys.
Third-party extensibility. The credential provider framework lets you choose where passkeys are stored, so you are not locked into iCloud Keychain if you prefer another solution.
Common Setup Issues and Solutions
Passkey Option Does Not Appear
If a website supports passkeys but you do not see the option:
- Ensure you are using a compatible browser (Safari, Chrome, or Firefox on macOS/iOS).
- Check that iCloud Keychain is enabled and syncing.
- Verify your device is running the minimum required OS version.
- Some websites only show passkey options after you have signed in with a password and navigated to security settings.
Passkey Not Syncing to Other Devices
If a passkey you created on one device is not appearing on another:
- Confirm both devices are signed into the same Apple ID.
- Verify iCloud Keychain is enabled on both devices.
- Check your internet connection – iCloud Keychain requires a network connection to sync.
- Wait a few minutes. Sync is usually fast but can take time on slow connections.
- Check that both devices run iOS 16, iPadOS 16, macOS Ventura or later, then quit and reopen the Passwords app.
Face ID or Touch ID Prompt Not Appearing
If the biometric prompt does not appear when using a passkey:
- Ensure Face ID or Touch ID is set up and functioning in Settings > Face ID & Passcode (or Touch ID & Passcode).
- Restart your device and try again.
- If biometrics fail, the system will fall back to requesting your device passcode.
Best Practices for Passkeys on Apple Devices
- Enable iCloud Keychain on all your Apple devices so passkeys sync automatically.
- Protect your Apple ID with a strong password and two-factor authentication. Your Apple ID is now the key to your passkeys.
- Set up passkeys for your most important accounts first – email, banking, cloud storage.
- Keep your passwords even after creating passkeys. Most services maintain password login as a fallback.
- Consider a dedicated password manager for unified credential management, especially if you need cross-platform support or prefer the data portability of the KeePass format.
- Stay updated. Apple adds passkey improvements with each OS release. Keep your devices on the latest software.
The setup process is simpler than most security improvements. A few minutes spent creating passkeys today eliminates real, ongoing risks from phishing and credential theft. Start with one account, see how it feels, and expand from there.
