## Passkeys FAQ

Get answers to your questions about passkeys and passwordless authentication.

## General

- [Are Passkeys The Future?](/content/faq/are-passkeys-the-future/index.html)
- [Are Passkeys FIDO2 Compliant?](/content/faq/are-passkeys-fido2-compliant/index.html)
- [Do Passkeys Require Biometrics?](/content/faq/do-passkeys-require-biometrics/index.html)
- [How are Passkeys Generated?](/content/faq/how-are-passkeys-generated/index.html)
- [How do OS versions impact passkey compatibility?](/content/faq/operating-system-versions-and-passkey-compatibility/index.html)
- [How Do Passkeys Work?](/content/faq/how-do-passkeys-work/index.html)
- [How is the Private Key of a Passkey synced?](/content/faq/private-key-sync-passkeys/index.html)
- [How to assess device landscape for passkey-readiness?](/content/faq/assessing-device-landscape-for-passkey-readiness/index.html)
- [How to assess passkey readiness in a system?](/content/faq/how-to-assess-passkey-readiness-in-enterprise-systems/index.html)
- [Passkeys without Biometrics](/content/faq/passkeys-without-biometrics/index.html)
- [Responsibilities of business stakeholders for passkeys](/content/faq/business-stakeholders-passkey-implementation/index.html)
- [What Are Passkeys?](/content/faq/what-are-passkeys/index.html)
- [What are privacy concerns related to passkey systems?](/content/faq/privacy-concerns-passkey-authentication/index.html)
- [What are some potential Drawbacks of Passkeys?](/content/faq/what-are-drawbacks-passkeys/index.html)
- [What Do Passkeys Look Like?](/content/faq/what-do-passkeys-look-like/index.html)
- [What is "Pairing" With a Passkey?](/content/faq/what-is-pairing-with-passkey/index.html)
- [When Are Passkeys Coming?](/content/faq/when-are-passkeys-coming/index.html)
- [When Are Passkeys Stored?](/content/faq/when-are-passkeys-stored/index.html)
- [When Can Passkeys Be Verified?](/content/faq/when-can-passkeys-be-verified/index.html)
- [When Do Passkeys Expire?](/content/faq/when-do-passkeys-expire/index.html)
- [Who are the key stakeholders in a passkey project?](/content/faq/stakeholders-passkey-implementation/index.html)
- [Why Are Passkeys Important?](/content/faq/why-are-passkeys-important/index.html)
- [Why Can Passkeys Be Removed?](/content/faq/why-can-passkeys-be-removed/index.html)

## Usage

- [Can Passkeys Be Shared?](/content/faq/can-passkeys-be-shared/index.html)
- [Can Passkeys Be Used Across Platforms?](/content/faq/passkeys-cross-platform/index.html)
- [Can Passkeys Be Used on Other People's Devices?](/content/faq/passkeys-other-people-devices/index.html)
- [How Do I Create a Passkey?](/content/faq/how-to-create-a-passkey/index.html)
- [Should I Use Passkeys?](/content/faq/should-i-use-passkeys/index.html)
- [What Can Passkeys Be Used For?](/content/faq/what-can-passkeys-be-used-for/index.html)
- [When Can Passkeys Be Used?](/content/faq/when-can-passkeys-be-used/index.html)

## Adoption

- [Are Passkeys Available?](/content/faq/are-passkeys-available/index.html)
- [How to Offer Passkey Demo Accounts in Google Play Store Verification?](/content/faq/how-to-offer-passkey-demo-account-google-play-store-verification/index.html)
- [What Are Passkeys in WhatsApp?](/content/faq/what-are-passkeys-in-whatsapp/index.html)
- [Where Can Passkeys Be Used?](/content/faq/where-can-passkeys-be-used/index.html)
- [Which banks offer passkeys?](/content/faq/banking-passkeys/index.html)
- [Which Crypto Exchanges offer Passkeys?](/content/faq/crypto-passkeys/index.html)
- [Which e-commerce shops offer passkeys?](/content/faq/ecommerce-passkeys/index.html)
- [Which Gambling & Betting Companies Offer Passkeys & Biometric Login?](/content/faq/gambling-betting-passkeys/index.html)
- [Which Insurances offer Passkeys?](/content/faq/insurance-passkeys/index.html)
- [Which Loyalty Programs offer Passkeys?](/content/faq/loyalty-program-passkeys/index.html)
- [Which Payment Providers offer Passkeys?](/content/faq/payment-passkeys/index.html)
- [Which Platforms Are Supported For Passkeys?](/content/faq/supported-platforms-passkeys/index.html)
- [Which Public Sector Organizations offer Passkeys?](/content/faq/public-sector-passkeys/index.html)
- [Which Superannuation Funds in Australia offer passkeys?](/content/faq/superannuation-funds-passkeys/index.html)

## Hardware

- [Are Passkeys Device Specific?](/content/faq/are-passkeys-device-specific/index.html)
- [Do Passkeys Transfer to a New iPhone?](/content/faq/passkeys-transfer-new-iphone/index.html)
- [How Do Passkeys Work Across Devices?](/content/faq/how-do-passkeys-work-across-devices/index.html)
- [How Many Passkeys Can a YubiKey Hold?](/content/faq/how-many-passkeys-can-yubikey-hold/index.html)
- [How To Log In From Second Device If Device-Bound Passkey Is Created?](/content/faq/login-second-device-device-bound-passkey/index.html)
- [Why Does Passkey Need Bluetooth?](/content/faq/why-does-passkey-need-bluetooth/index.html)

## Operating Systems

- [How to Create a Passkey on a Samsung Device Without Samsung Pass?](/content/faq/how-to-create-passkey-samsung-device-without-samsung-pass/index.html)
- [Where Are Passkeys Stored in Windows?](/content/faq/where-are-passkeys-stored-in-windows/index.html)
- [Where are Passkeys stored on Android?](/content/faq/where-passkeys-stored-android/index.html)
- [Where are Passkeys Stored on iPhone?](/content/faq/where-are-passkeys-stored-on-iphone/index.html)
- [Where Are Passkeys Stored on macOS?](/content/faq/where-are-passkeys-stored-on-macos/index.html)

## Browsers

- [Do Passkeys Work with Firefox?](/content/faq/do-passkeys-work-with-firefox/index.html)
- [Where are Passkeys Stored in Chrome?](/content/faq/where-are-passkeys-stored-in-chrome/index.html)

## Differentiation

- [Are Passkeys Like a Password Manager?](/content/faq/are-passkeys-like-password-manager/index.html)
- [Do Passkeys Replace Passwords?](/content/faq/do-passkeys-replace-passwords/index.html)
- [How Are Passkeys Different From Passwords?](/content/faq/how-passkeys-different-from-passwords/index.html)
- [How Does WebAuthn Differ From Passkeys?](/content/faq/how-does-webauthn-differ-from-passkeys/index.html)
- [Is Face ID a Passkey?](/content/faq/is-face-id-passkey/index.html)
- [What is a FIDO soft token?](/content/faq/what-is-a-fido-soft-token/index.html)
- [What is the Difference Between a YubiKey and a Passkey?](/content/faq/what-is-difference-between-yubikey-passkey/index.html)
- [What is the Difference between conditionalMediation and conditionalGet?](/content/faq/difference-conditionalget-conditionalmediation-webauthn/index.html)
- [What is the Difference Between FIDO2 and Passkeys?](/content/faq/what-is-difference-fido2-passkeys/index.html)
- [What's the difference between FIDO1 and FIDO2?](/content/faq/fido1-vs-fido2/index.html)
- [Why Are Passkeys Better Than Passwords?](/content/faq/why-passkeys-are-better-than-passwords/index.html)

## Security

- [Are Passkeys Safe?](/content/faq/are-passkeys-safe/index.html)
- [Can Passkeys Be Hacked?](/content/faq/can-passkeys-be-hacked/index.html)
- [Can Passkeys Be Stolen?](/content/faq/can-passkeys-be-stolen/index.html)
- [Do Passkeys Use PKI?](/content/faq/do-passkeys-use-pki/index.html)
- [How Are Passkeys Secure?](/content/faq/how-are-passkeys-secure/index.html)
- [Should you allow multiple passkeys per user account?](/content/faq/multiple-passkeys-per-account/index.html)
- [What if a Passkey Device is Lost?](/content/faq/what-if-passkey-device-lost/index.html)
- [Why Are Passkeys Safer & More Secure Than Passwords?](/content/faq/why-passkeys-safer-more-secure-than-passwords/index.html)

## Other

- [Are passkey providers responsible for securing auth data?](/content/faq/are-passkey-providers-responsible-for-securing-auth-data/index.html)
- [Are synced passkeys secure despite being stored in cloud?](/content/faq/synced-passkeys-security-cloud/index.html)
- [Can a passkey provider store credentials across devices?](/content/faq/can-passkey-provider-store-credentials-across-devices/index.html)
- [Can I create passkeys in cross-origin iframes?](/content/faq/create-passkeys-cross-origin-iframes/index.html)
- [Can I recover funds stolen from super account in breach?](/content/faq/recover-stolen-superannuation-funds/index.html)
- [Can passkeys be used on other domains without an iframe?](/content/faq/passkeys-cross-domain-usage-without-iframe/index.html)
- [Can passkeys created by 3rd-party providers be compromised?](/content/faq/can-passkeys-created-by-third-party-providers-be-compromised/index.html)
- [Can synced passkeys be used across different platforms?](/content/faq/synced-passkeys-cross-platform/index.html)
- [Do passkeys truly reduce password resets and OTP usage?](/content/faq/passkeys-reduce-password-resets-otp-costs/index.html)
- [How can banks educate customers about passkey benefits?](/content/faq/how-banks-can-educate-customers-about-passkeys/index.html)
- [How can banks transition from traditional auth to passkeys?](/content/faq/banks-transition-to-passkeys/index.html)
- [How can enterprises measure the ROI of adopting passkeys?](/content/faq/how-can-enterprises-measure-roi-of-passkeys/index.html)
- [How can functional testing ensure a robust passkey system?](/content/faq/functional-testing-passkey-system/index.html)
- [How can passkeys be integrated into mobile banking apps?](/content/faq/integrate-passkeys-mobile-banking/index.html)
- [How can passkeys prevent account takeovers?](/content/faq/how-can-passkeys-prevent-account-takeovers/index.html)
- [How do device-bound passkeys enhance security?](/content/faq/device-bound-passkeys-security/index.html)
- [How do emulators & real devices compare in passkey testing?](/content/faq/emulators-vs-real-devices-passkey-testing/index.html)
- [How do fallbacks influence user trust in passkeys?](/content/faq/fallback-management-user-trust-passkey-retention/index.html)
- [How do I enable passkeys in an iframe?](/content/faq/enable-passkeys-iframe/index.html)
- [How do One-Tap passkey logins simplify authentication?](/content/faq/one-tap-passkey-login-simplify-authentication-abandon-passwords/index.html)
- [How do passkeys align with standards like NIST or ISO?](/content/faq/passkeys-alignment-with-nist-and-iso/index.html)
- [How do passkeys contribute to cost savings in enterprises?](/content/faq/passkeys-cost-savings-enterprise-security/index.html)
- [How do passkeys improve authentication in enterprises?](/content/faq/passkeys-enterprise-authentication-benefits/index.html)
- [How do passkeys prevent credential stuffing & reuse attacks?](/content/faq/passkeys-prevent-credential-stuffing-reuse-attacks/index.html)
- [How do passkeys reduce operational costs for organizations?](/content/faq/how-do-passkeys-reduce-operational-costs/index.html)
- [How do passkeys reduce user friction during authentication?](/content/faq/how-passkeys-reduce-user-friction-authentication/index.html)
- [How do passkeys streamline account recovery processes?](/content/faq/how-do-passkeys-streamline-account-recovery/index.html)
- [How do security teams handle passkey compliance & risk?](/content/faq/enterprise-security-teams-passkeys-compliance-risk/index.html)
- [How do SMS transaction costs vary by provider and region?](/content/faq/sms-transaction-costs-region-provider/index.html)
- [How do you conduct performance & load tests for passkeys?](/content/faq/performance-load-testing-passkeys/index.html)
- [How do you test cross-device authentication for passkeys?](/content/faq/testing-cross-device-authentication-passkeys/index.html)
- [How does account enumeration impact passkey login flows?](/content/faq/account-enumeration-risk-passkeys/index.html)
- [How does Apple’s SPC limitation block passkey checkouts?](/content/faq/secure-payment-confirmation-apple-limitations/index.html)
- [How does biometric auth enhance compliance & security?](/content/faq/biometric-authentication-security-compliance/index.html)
- [How does biometric auth with passkeys fit into PSD3/PSR?](/content/faq/biometric-authentication-passkeys-psd3-psr/index.html)
- [How does EBA Single Rulebook Q&A clarify SCA ambiguities?](/content/faq/eba-single-rulebook-sca-clarifications/index.html)
- [How does Google Workspace integrate passkeys?](/content/faq/google-workspace-passkey-integration/index.html)
- [How does gradual rollout enhance passkey adoption?](/content/faq/gradual-rollout-support-passkey-adoption/index.html)
- [How does passkey adoption differ of DIY & 3rd-party solutions?](/content/faq/differences-self-developed-third-party-authentication-passkeys/index.html)
- [How does passkey usage in enterprises reduce costs?](/content/faq/passkey-usage-enterprise-security-helpdesk-benefits/index.html)
- [How does regression testing improve passkey reliability?](/content/faq/regression-testing-passkey-reliability/index.html)
- [How does SIM swapping compromise SMS authentication?](/content/faq/sim-swapping-sms-authentication-risk/index.html)
- [How does the Identifier-First Approach work for passkeys?](/content/faq/identifier-first-approach-passkey-login/index.html)
- [How does the NIST SP 800-63B supplement enhance passkey adoption?](/content/faq/nist-sp-800-63b-supplement-passkey-adoption/index.html)
- [How is the passkey user experience for non-technical users?](/content/faq/passkey-user-experience-benefits-non-technical-audience/index.html)
- [How should passkey registration & authentication be tested?](/content/faq/testing-passkey-registration-authentication/index.html)
- [How to adjust authentication flows based on preferences?](/content/faq/dynamic-authentication-flows-user-preferences/index.html)
- [How to boost passkey enrollment?](/content/faq/boost-passkey-enrollment-reduce-password-otp/index.html)
- [How to check if my super account has been compromised?](/content/faq/how-to-check-if-superannuation-account-compromised/index.html)
- [How to decide between DIY & outsourced passkey approach?](/content/faq/diy-vs-outsourced-passkey-implementation/index.html)
- [How to decide on passkey skip logic?](/content/faq/passkey-skip-logic-cooldown-best-practices/index.html)
- [How to encourage passkey creation on multiple devices?](/content/faq/multi-device-passkey-coverage-critical/index.html)
- [How to ensure GDPR compliance when implementing passkeys?](/content/faq/ensure-gdpr-compliance-with-passkeys/index.html)
- [How to ensure no PII is permanently stored with passkeys?](/content/faq/ensure-no-pii-stored-with-passkeys/index.html)
- [How to mitigate account enumeration risks with passkeys?](/content/faq/mitigating-account-enumeration-risks-passkeys/index.html)
- [How to modify frontend applications to support passkeys?](/content/faq/frontend-modifications-support-passkeys/index.html)
- [How to optimize passkey creation flow (mobile vs desktop)?](/content/faq/optimize-passkey-creation-flows-mobile-desktop/index.html)
- [How to prevent creation of multiple passkeys for 1 account?](/content/faq/prevent-multiple-passkeys-for-one-account/index.html)
- [How to provide fallbacks for users with passkey issues?](/content/faq/passkeys-fallback-options/index.html)
- [How to test fallback mechanisms for unsupported devices?](/content/faq/testing-fallback-mechanisms-passkeys/index.html)
- [How to use customer support to help with passkey issues?](/content/faq/passkeys-customer-support-integration/index.html)
- [Is there a passkeys newsletter?](/content/faq/passkeys-newsletter/index.html)
- [Should you use passkey security or convenience messaging?](/content/faq/security-vs-convenience-messaging-passkey-setup/index.html)
- [Was my superannuation fund affected by the data breach?](/content/faq/super-fund-affected-data-breach/index.html)
- [What are Authenticator Assurance Levels in digital identity?](/content/faq/authenticator-assurance-levels-aal-digital-identity/index.html)
- [What are challenges for passkeys in cross-origin iframes?](/content/faq/cross-origin-iframe-passkey-challenges/index.html)
- [What are enterprise strategies to push passkey adoption?](/content/faq/strategies-enterprises-encourage-passkey-adoption/index.html)
- [What are good user prompts to nurture passkey creation?](/content/faq/passkey-user-prompts-increase-adoption/index.html)
- [What are key metrics to measure passkey success?](/content/faq/key-metrics-passkey-implementation-success/index.html)
- [What are objectives of user acceptance tests for passkeys?](/content/faq/user-acceptance-testing-passkeys-objectives/index.html)
- [What are optimization goals for passkey login success?](/content/faq/passkey-login-success-rate-optimization/index.html)
- [What are passkey best practices to get +50% adoption?](/content/faq/passkey-best-practices-for-high-adoption/index.html)
- [What are passkey security benefits over passwordless auth?](/content/faq/passkey-security-benefits-vs-passwordless-auth/index.html)
- [What are risks of transitioning from SMS OTPs to passkeys?](/content/faq/risks-transitioning-sms-otps-to-passkeys/index.html)
- [What are security risks of third-party passkey providers?](/content/faq/security-risks-third-party-passkey-providers/index.html)
- [What are steps for creating a passkey in user onboarding?](/content/faq/steps-creating-passkey-user-onboarding/index.html)
- [What are steps in testing enterprise passkey deployments?](/content/faq/testing-enterprise-passkey-deployments-key-steps/index.html)
- [What are the benefits of automated testing for passkeys?](/content/faq/benefits-automated-testing-passkey-systems/index.html)
- [What are the benefits of using passkeys in iframes?](/content/faq/benefits-passkeys-in-iframes/index.html)
- [What are the business benefits of passkeys in finance?](/content/faq/business-benefits-of-passkeys-in-finance/index.html)
- [What are the hardware limitations for passkey support?](/content/faq/hardware-limitations-passkey-support/index.html)
- [What are the key drawbacks of SMS-based authentication?](/content/faq/drawbacks-of-sms-authentication/index.html)
- [What are the main integration options for passkeys?](/content/faq/main-integration-options-passkeys/index.html)
- [What are the technical requirements to support passkeys?](/content/faq/technical-requirements-passkeys/index.html)
- [What are the technical standards for SCA in the RTS?](/content/faq/sca-rts-technical-standards/index.html)
- [What Challenges do Banks face when implementing Passkeys](/content/faq/challenges-banks-passkeys/index.html)
- [What challenges might arise from low passkey adoption?](/content/faq/challenges-of-low-passkey-adoption/index.html)
- [What changes are required in the backend to use passkeys?](/content/faq/backend-changes-passkey-login/index.html)
- [What encryption standards are used in passkey-based auth?](/content/faq/encryption-standards-passkey-auth/index.html)
- [What factors to check when choosing passkey integration?](/content/faq/factors-choosing-passkey-integration-method/index.html)
- [What if my device does not support Bluetooth or QR codes?](/content/faq/device-does-not-support-bluetooth-or-qr-codes/index.html)
- [What if my phone battery dies during QR passkey authentication?](/content/faq/phone-battery-dead-qr-passkey-authentication/index.html)
- [What industries are most suitable for adopting passkeys?](/content/faq/industries-suitable-for-adopting-passkeys/index.html)
- [What is NIST & why are its guidelines significant for auth?](/content/faq/what-is-nist-authentication-guidelines-significance/index.html)
- [What is PSD2 & how does it impact authentication requirements?](/content/faq/psd2-authentication-requirements/index.html)
- [What is PSD3 and how does it differ from PSD2?](/content/faq/psd3-vs-psd2-differences/index.html)
- [What is SCA and why is it essential under PSD2?](/content/faq/sca-psd2-importance/index.html)
- [What is SMS traffic pumping & how does it impact businesses?](/content/faq/sms-traffic-pumping-impact/index.html)
- [What is SMS-based authentication and how does it work?](/content/faq/sms-based-authentication-explained/index.html)
- [What is Strong Customer Authentication (SCA) under PSD2?](/content/faq/strong-customer-authentication-psd2/index.html)
- [What is the "Passkey Button" approach?](/content/faq/passkey-button-approach/index.html)
- [What is the "Password + Passkey" method for authentication?](/content/faq/password-passkey-authentication/index.html)
- [What libraries and tools are recommended for passkeys?](/content/faq/recommended-libraries-tools-passkey-integration/index.html)
- [What measures to protect super accounts from cyberattacks?](/content/faq/protect-superannuation-account-cybersecurity/index.html)
- [What tools to analyze device & browser usage for passkeys?](/content/faq/tools-analyze-device-browser-usage-passkeys/index.html)
- [What user data is processed during passkey authentication?](/content/faq/user-data-processed-during-passkey-authentication/index.html)
- [What's best for passkey testing in CI/CD pipelines?](/content/faq/passkey-testing-cicd-best-practices/index.html)
- [What's best for PSD2-compliant passkey integration?](/content/faq/psd2-passkey-integration-best-practices/index.html)
- [What's essential when connecting passkeys to existing auth?](/content/faq/passkeys-authentication-mfa-integration/index.html)
- [What's FIDO Alliance's role in defining passkey standards?](/content/faq/role-fido-alliance-passkey-standards/index.html)
- [What's important when selecting a WebAuthn server library?](/content/faq/selecting-webauthn-server-library/index.html)
- [What's the difference between passkey creation & usage?](/content/faq/passkey-creation-vs-ongoing-passkey-usage/index.html)
- [When to shift to mandatory passkey enforcement?](/content/faq/mandatory-passkey-enforcement-transition-strategy/index.html)
- [Which browsers support passkey creation in 3rd-party iframe?](/content/faq/browsers-support-passkey-third-party-iframe/index.html)
- [Which login best practices achieve +50% passkey usage?](/content/faq/best-practices-passkey-logins-high-usage/index.html)
- [Why are digital tokens more secure than SMS OTPs?](/content/faq/why-digital-tokens-more-secure-sms-otps/index.html)
- [Why are SMS OTPs costly for enterprises?](/content/faq/why-are-sms-otps-costly-for-enterprises/index.html)
- [Why are WebViews in mobile apps a challenge for passkeys?](/content/faq/webviews-challenge-passkeys-mobile-apps/index.html)
- [Why do enterprises use passkeys for payment authentication?](/content/faq/enterprises-passkeys-payment-authentication/index.html)
- [Why do payment providers prefer redirects over embeddings?](/content/faq/redirect-based-passkeys-preference/index.html)
- [Why do post-sign-in passkey prompts perform better?](/content/faq/post-sign-in-passkey-prompt-effectiveness/index.html)
- [Why do some platforms not support attestation for passkeys?](/content/faq/why-some-platforms-do-not-support-attestation-for-passkeys/index.html)
- [Why does Stripe focus on redirects for passkeys?](/content/faq/stripe-passkeys-approach-redirect/index.html)
- [Why is backward compatibility crucial in passkey integration?](/content/faq/backward-compatibility-crucial-passkey-integration/index.html)
- [Why is Bluetooth used if it doesn’t transmit the passkey?](/content/faq/why-bluetooth-used-no-passkey-transmission/index.html)
- [Why is end-to-end encryption important for passkey sync?](/content/faq/end-to-end-encryption-passkey-sync/index.html)
- [Why is Invisible MFA more secure than traditional MFA?](/content/faq/why-invisible-mfa-more-secure-traditional-mfa/index.html)
- [Why is phishing such an issue in the banking sector?](/content/faq/phishing-banking-sector-issues/index.html)
- [Why is the shift from directive to regulation significant?](/content/faq/psd3-psr-directive-to-regulation-significance/index.html)
- [Why is user education important in passkey adoption?](/content/faq/importance-user-education-passkey-adoption/index.html)
- [Why might passkey migration to passwordless fail?](/content/faq/passkey-migration-failure-without-high-daily-usage/index.html)
- [Why should banks start collecting passkeys early?](/content/faq/why-banks-should-collect-passkeys-early/index.html)
- [Why were synced passkeys introduced & what are benefits?](/content/faq/why-synced-passkeys-benefits/index.html)

## Learn More About Passkey Terminologies

Look up specific keywords and learn more about these terminologies

- [Passkey Glossary](/content/glossary/index.html)