Goodbye, Passwords. Welcome, Passkeys.

|

,

A recent Wirecutter video published by The New York Times walks viewers through passkeys, the newer login method that is gradually replacing traditional passwords on major sites and apps. The note below is a beginner-friendly explainer based on the Times’ general guidance on passkeys rather than a line-by-line summary of the video itself.

Below are key highlights from the video:

  • What a passkey is. A passkey is a digital credential stored on a device, such as a phone, tablet, or laptop, that signs in to an account without a typed password. Instead of remembering a string of characters, the user unlocks the device with Face ID, a fingerprint, or a PIN, and the device proves to the website that the right person is logging in.
  • How it works under the hood. When a passkey is created, two linked keys are generated. A public key is sent to the website. A private key stays on the device and never leaves it. At login, the site sends a one-time challenge, the device signs it with the private key, and the site verifies the signature with the public key. The password itself never travels across the internet because there is no password.
  • Why it is safer than a password. Passwords can be guessed, reused, stolen in data breaches, or coaxed out through phishing emails. Passkeys solve those problems by design. There is nothing for a thief to steal from a server, nothing to reuse across sites, and nothing to type into a fake login page, since passkeys are tied to the real website’s address.
  • Where they already work. Apple, Google, and Microsoft have built passkey support into iOS, Android, macOS, Windows, and their main browsers. Major services such as Amazon, PayPal, eBay, GitHub, X, and many banks now accept passkeys. A password manager like 1Password, Bitwarden, or Dashlane can also store and sync passkeys across devices.
  • What setting one up looks like. Inside an account’s security settings, the user picks “Add a passkey,” confirms with Face ID, a fingerprint, or a device PIN, and that is the entire setup. The next login simply asks for the same biometric or PIN.
  • What to know before switching. Passkeys sync through whichever ecosystem stores them, such as iCloud Keychain or Google Password Manager, so it helps to enable that sync and keep account recovery options up to date. Most services still keep a password as a backup, which is sensible while the technology is rolling out.

From a beginner’s perspective, the simple takeaway is that passkeys let a device handle the hard part of logging in. Face or fingerprint replaces a memorized password, the secret never leaves the device, and the everyday experience is faster and safer.

Acknowledgement: This summary was generated using AI writing tools as part of my AI Explorations process. It is a general primer based on widely available guidance about passkeys, rather than a direct transcription of the linked video.

Related Resource Links