Set up a Google passkey in your account's passkey settings on a device you own. Before relying on it, check where the passkey is stored and how you would regain access if that device went missing.
Google's October 8 passkey guide recommends the account's passkey setup page. Passkeys use a device unlock method, such as a fingerprint, face scan or PIN, and are designed to resist phishing. The biometric information stays on the device.
Begin with a device you control
Choose a phone or computer you personally own and use. Update its operating system and browser and make sure its screen lock works. If you share the device with someone who can unlock it, consider that access before creating a passkey there.
Google's account instructions warn that someone who can unlock a device with your passkey can access the account, even after you sign out. A shared public computer is therefore a poor place to create one.
Open the account's security page yourself, rather than following an unexpected message asking you to upgrade your login. Confirm the account name, especially if the browser contains several Google accounts.
Create it, then check where it lives
Go to Google's passkey settings, select Create a passkey and follow the device-unlock prompt. The exact dialog depends on the operating system and browser.
A password manager or another device may offer to save the passkey. Read that choice before accepting. Record the device or manager name in your own account inventory so that a later phone replacement does not become a guessing exercise.
This record should describe where the credential is stored. Do not write down the phone's unlock PIN alongside the account name in a file that other people can read.
Keep the recovery check separate
Adding a passkey does not remove the authentication and recovery factors already on a Google account. Review the recovery email and phone number and make sure they still belong to you. Keep an existing signed-in session available while checking the new arrangement.
| Item to record | Example of a useful note |
|---|---|
| Account | The specific email address |
| Passkey location | Personal phone or named password manager |
| Recovery route | A current recovery email you can access |
| Additional device | Whether another personal device is configured |
| Setup result | Created, tested, or waiting for availability |
You do not need to force a risky sign-out to prove the setup succeeded. Inspect the passkey list first. Google's help page says a new passkey may take seven days to become available for sign-in in some circumstances, so a delay does not necessarily mean creation failed.
Recovery can fail if the passkey and the only recovery mailbox are accessible solely on the same missing phone. Check whether you can open the recovery email or use another approved sign-in method from a personal computer you still control.
Keep an existing session open while checking. You do not need to remove a working credential, reset the account or deliberately lock yourself out. Follow Google's recovery instructions for the account if you discover an outdated contact, and recheck the saved contact after making a change.
Understand the other-device option
If you later sign in on a supported computer using a phone's passkey, Google's instructions describe scanning a QR code and confirming on the phone, with Bluetooth enabled. The computer and phone need the relevant support; the presence of a camera alone is insufficient.
Employer and school accounts can have different rules. Google says Workspace administrators control whether users can skip a password with a passkey. Follow that policy for a managed account instead of applying a personal-account procedure to company access.
Before selling or giving away an old device, return to the account's passkey list and review its entry. Make that account check part of the handover, alongside the device manufacturer's reset procedure.
