Passkey
Definition
A phishing-resistant sign-in credential stored on your device and unlocked with your fingerprint, face or PIN.
Passkey, explained
A passkey replaces a password with a cryptographic key pair. The private key stays on your device or in your password manager, and the site only stores the public key. You sign in by unlocking your device with a fingerprint, face scan or PIN. Passkeys are bound to the real website's domain, so a fake lookalike page cannot use them, which makes them much more resistant to phishing than passwords, SMS codes or authenticator codes. Google, Apple, Microsoft and many other services support them. Where available, a passkey is a strong long-term recovery and login method to add after you sign up.
Related terms
2FA (two-factor authentication)
Signing in with two different proofs, typically a password plus a code, app prompt, passkey or security key.
Authenticator app
An app that generates time-based login codes on your device, with nothing sent over the phone network.
Smishing
Phishing by text message: a fake SMS that tries to get you to click a link, share a code or send money.
Where you'll meet this term
How to Receive SMS Online: Get Verification Codes Without Your Own Number
How to receive SMS verification codes online: free public inboxes vs private rented numbers vs VoIP apps vs a second SIM, with risks and setup steps.
Read the guide →App guidesCreating a Gmail or Google Account Without Your Phone Number
When Google asks for a phone number at sign-up and when it doesn't, how to verify a Gmail account with a virtual number, and how to secure it afterward.
Read the guide →Getting startedTemporary Phone Numbers for Verification: What They Are and When to Use One
What a temporary phone number for verification is, whether it's legal and safe, what it can't do, and how to pick a trustworthy provider.
Read the guide →Safety & privacyWhat Is SMS Verification? How OTP Codes Work and Safer Alternatives
What SMS verification and one-time passcodes are, why sites use them, how codes are delivered, and how SMS 2FA compares to authenticator apps and passkeys.
Read the guide →Temporary number vs Long-term numberTemporary number vs a long-term number you own
A temporary number covers one verification and is then recycled. A long-term number stays yours for recovery. Noir SMS offers temporary numbers only.
See the comparison →SMS verification vs Email verificationSMS verification vs email verification
Email verification is free and easy to recover; SMS is harder to fake in bulk but tied to a number you must keep. How they differ and when each fits.
See the comparison →