Google accounts now take passkeys. Set one up
Since last week you can sign in to Google with a passkey instead of a password. Two minutes, and phishing stops working.
Last week Google turned on passkeys for personal Google accounts. Your Gmail, Drive and YouTube can now be opened with your phone’s fingerprint or face unlock instead of a password and a code.
Why bother: a passkey only works on the real Google site. A fake login page can’t use it, however good it looks. That removes the most common way Gmail accounts get stolen.
How to do it:
- Go to
g.co/passkeyswhile signed in. - Create a passkey. Your phone or laptop will ask for your fingerprint, face or PIN.
- Add a second one on another device, so losing one phone doesn’t lock you out.
Your password still works for now, so keep it strong and unique. And check your recovery phone and email while you’re there. That’s the next weakest door.
For Google Workspace accounts at work, your admin decides. If you’re the admin, try it on your own account first.