How to create passkeys on Android

Passkeys is a revolutionary system that is transforming the way we access our favorite services and apps from our mobile devices. In this article, we show you how. How to create passkeys on Android, leaving behind the problems associated with remembering complex passwords.

This system offers superior security to traditional passwords. Its advantages are undeniable, although it also has some limitations that should be known.

What are passkeys and how are they revolutionizing Android security?

 

Passkeys, or access keys, represent a radical evolution from the classic username and password scheme. Developed under the FIDO standard (Fast Identity Online) by an alliance between Google, Apple, Microsoft and other major technology companies, its main objective is Eliminate once and for all the use of conventional passwords and the risks associated with them.

How do they work? When you create a passkey on your Android device, two cryptographic keys are generated:

• Public key: Stored in the service or application where you are going to log in.
• private key: Stays on your phone and never leaves it.

This system eliminates common risks such as:

• Phishing: It's no longer possible to be tricked into giving up your password, since you never need to write it down.
• Massive thefts or leaks: In the event of hacking, only public keys are obtained, which are useless without the private key.
• Weak or repeated passwords: You don't need to memorize or invent new passwords that you then reuse.

When using passkeys on Android, It's as simple as unlocking your phone and it's so secure that it even eliminates the need for two-step authentication.All of this is thanks to open standards, which allow them to work across many services and platforms, not just Google.

Main advantages of using passkeys on Android: Security and convenience

Passkeys on Android not only strengthen security but also make everyday use easier. Their main advantages are:

• Greater protection against cyberattacks: The public-key cryptography used in Android minimizes the risks of theft and impersonation.
• Goodbye to remembering passwords: Instead of managing multiple passwords, you only need to unlock your device.
• Faster experience: Logging in simply requires your fingerprint, looking at the camera, or entering your PIN.
• Automatic synchronization between Android devices: If you have multiple phones or tablets with the same Google account, your passkeys are effortlessly shared.
• Increasing compatibility: More and more sites and applications support this standard, from Google and Microsoft to social networks and online stores.

The user experience is as simple as password autofill, but much more secure, without worrying about forgetting passwords.

What do you need to use passkeys on Android?

Before setting up your passkeys, Check that your device meets these basic requirements:

• Android 9.0 or higher: The minimum version required for compatibility. Most current mobile phones meet this requirement.
• Screen lock active: PIN, pattern, fingerprint or facial recognition.
• Personal Google Account: Available for individual accounts, not yet for Google Workspace accounts.
• Google Password Manager enabled: This is where passkeys are stored and synchronized.
• Internet access (to activate and synchronize).
• Bluetooth enabled (optional, to log in on other devices like a laptop).

How to create and activate a passkey on your Android step by step

The process may vary depending on the service and device, but it generally involves following these steps:

1. Go to the site or app where you want to use passkeys. For example, in Google accounts, go to g.co/passkeys and log in.
2. Look for the option to create or activate a passkey. It is usually called “Create Passkey” or similar in Security or Login.
3. Select the device for creation. If you do it from your Android phone, it is usually detected automatically.
4. Confirm your identity. A window will open requesting authentication using a fingerprint, PIN, pattern, or facial recognition.
5. The passkey is created and saved in the Google password manager. From then on, you'll be able to use it on all compatible services and sync it across your Android devices.

What is the daily routine like using passkeys?

Once configured, their use is practically transparent:

• When accessing compatible websites or apps, An option will appear to use the saved passkey.
• You just need to unlock your phone (fingerprint, PIN, or facial recognition) and access it without entering any passwords.
• Everything is managed from the Google password manager, which allows you to easily view, export or delete your passkeys.
• If you change your mobile phone, you can transfer your passkeys by signing in to your Google account and syncing.

What happens if I lose my phone or it's replaced?

In the event of unforeseen events, security remains strong, but it is important to know how to act:

• If you lose your mobile phone, only someone who unlocks your device can use your passkeys, just like with other apps and data.
• When changing or restoring the mobile phone, stored passkeys are transferred if you use Google Password Manager and sync is enabled.
• To delete a passkey, you can do this from the passwords section in your Google account or in the access key management.
• In case your Google account is hacked, it will be key to change the master password and remove trusted devices from security.

Remember Passkeys only work on the devices and services where they were created. They're not easy to crack, and if you lose access, you can always revert to traditional passwords while you regain control.

Limitations and aspects to take into account on Android

Although passkeys represent the future, they still present some limitations:

• Availability and compatibility: Not all sites or apps support passkeys yet, although adoption is increasing every month.
• Syncing outside of Android: Passkeys created on Android only sync between devices linked to the same Google account for now. To use them on Windows, macOS, or iOS, you'll need to wait for future updates.
• Corporate or educational accounts: Google Workspace does not yet allow you to activate passkeys in general.
• Local management in Chrome: Saving them in Chrome on a computer doesn't sync them to other devices.
• Risk if several people use the device: Anyone who can unlock your phone can potentially use the passkeys to access your services.

Passkeys represent the future of authentication on Android, offering simple setup, robust protection, and growing adoption. For those who qualify, removing passwords will be easier and more secure, while still keeping your phone protected and properly managed in case of device loss or replacement.