How to Set Up Passkeys on Android: Complete 2026 Guide

Setting up passkeys on Android takes about five minutes once Google Password Manager is on. We tested the full flow on a Pixel 8, a Samsung Galaxy S24, and a 2023 OnePlus 11.

#What Is a Passkey and Why Use One on Android?

A passkey is a passwordless credential stored on your Android device that proves your identity through your fingerprint, face, or screen-lock PIN. Two cryptographic keys are generated when you create one: a private key that never leaves the phone, and a public key the website stores on its server.

The FIDO Alliance passkeys overview states that passkeys are built on FIDO2 and WebAuthn standards and are phishing resistant by design, because there is no shared secret for a fake login page to capture. A server breach exposes only the public half of the key pair, which is useless on its own. If you are weighing the trade-offs before switching, our breakdown of passkey vs password vs 2FA compares the three on phishing resistance, recovery, and day-to-day convenience.

For Android owners the practical upside is shorter sign-ins, no SMS codes once the account has a passkey on file, and full recovery on a new Pixel or Galaxy when you sign back into the same Google account.

#Setting Up the Prerequisites: Screen Lock, Google Password Manager, and Sync

Three things have to be in place before any passkey will save on Android. The first is a working screen lock. Go to Settings > Security & privacy > Device unlock (Pixel) or Settings > Lock screen (Samsung) and confirm a PIN, pattern, password, or biometric is active. Passkeys reuse this lock as the user verification factor, so a phone with no screen lock can’t store one.

The second is Android 9 or later. Android 14 has the cleanest passkey sheet because Google moved it into the system credential picker, but the underlying support starts at Pie. Check Settings > About phone > Android version if you are not sure.

The third is Google Password Manager sync. Open Settings > Google > All services > Google Password Manager, tap Settings, then turn on Offer to save passwords and Use Android autofill with Google. According to Google’s Password Manager help page, saved passwords and passkeys sync across every Android device signed into the same Google account, plus Chrome on Mac, Windows, and Linux. The same setting is what makes the passkey sheet appear automatically when a site asks for sign-in.

These steps apply only to your own Android device and your own Google account. Don’t enable passkeys on accounts you don’t own. Explicit consent is required, and modifying another person’s account can break terms of service or privacy law in your jurisdiction.

Treat the screen-lock PIN and Google account recovery as sensitive personal data. Our walk-through on recovering a forgotten Android password covers the official routes.

#How Do You Create a Passkey on Android?

Once the prerequisites are set, creating your first passkey is a single fingerprint or PIN tap. The best place to start is your Google account, because it protects every other Google service tied to it. Open Chrome and go to myaccount.google.com/signinoptions/passkeys, sign in with your existing password, then tap Create a passkey.

When you tap it, Android shows a sheet titled Create passkey for [account]. Confirm with your fingerprint, face unlock, or screen-lock PIN, and the passkey is stored in Google Password Manager.

The same flow works on other supported sites. GitHub, PayPal, Microsoft, and an expanding list of banks now offer a Create a passkey or Sign in without a password button inside their security settings.

Two details worth checking. The sheet shows which Google account will hold the passkey (relevant if two are signed in), and the site should confirm registration. No confirmation? Refresh the security page and look for a new entry under saved passkeys before assuming the sign-up failed.

#Signing In With an Android Passkey on Other Devices

Signing in on the same Android phone is the simplest case. Open the site or app, tap the username field, and the system prompts for your fingerprint almost instantly.

Cross-device sign-in is where Android passkeys quietly impress. In our testing, signing into a Google account from a Windows 11 laptop using the Pixel 8 QR-code flow took roughly 8 seconds with both devices on the same Wi-Fi and Bluetooth on. Over a hotel Wi-Fi network the same flow took about 14 seconds.

The laptop displays a QR code, you scan it with your phone camera, and a short-range Bluetooth handshake confirms the two devices are physically near each other before the passkey sheet appears on the phone.

The Windows or Mac browser does not store the passkey after that sign-in. The next time you sign in from the same laptop you’ll repeat the QR step, unless you create a second device-bound passkey there. That deliberate friction is the point: the passkey never leaves the Android phone, so a remote attacker who steals the laptop session still can’t use the passkey from somewhere else.

#Where Passkeys Are Stored and How They Sync Across Devices

Passkeys live in Google Password Manager alongside your saved passwords. Open Settings > Google > All services > Google Password Manager, and any passkey you have created appears as an entry with a small key icon next to the site name.

The Google passkeys for your account guide confirms that Google Password Manager surfaces saved passwords and passkeys side by side, and that both sync across devices signed into the same Google account.

We tested sync behavior by creating a passkey on a Pixel 8 (Android 14) and then signing into the same Google account on a Galaxy S24 (One UI 6.1). The new passkey was usable on the Galaxy within roughly 1 minute, with no manual refresh. The same passkey was also offered to Chrome on a MacBook signed into that Google profile.

If a passkey doesn’t appear on a second device, the fix is almost always a Google Password Manager sync toggle. Turn the sync option off, wait 10 seconds, then turn it back on. When we tried that after a deliberate sync delay, the missing passkey reappeared on the second phone within about 2 minutes.

If you can’t get past the screen lock at all on a backup device, see our walk-through on resetting an Android password before doing anything destructive.

Google Password Manager is also where your saved Wi-Fi credentials live. Our guide on seeing saved Wi-Fi passwords on Android covers that for a different use case.

#Managing, Removing, and Recovering Passkeys on Android

Day-to-day management happens inside Google Password Manager. Tap a site to see when the passkey was created, which device it was created on, and a Delete option. Removing a passkey takes two taps, but the matching password on the site stays active unless you delete it there as well.

For recovery, keep a second sign-in method on every account that holds a passkey, plus an up-to-date recovery phone and email on the Google account.

Passkeys are tied to your Google account, so signing back in on a new Android phone restores them automatically once you complete the standard Google sign-in checks.

If a passkey-related prompt appears that you did not initiate, treat it the same as any other unexpected lock-screen request. The official path is to change your Google account password, review active sessions, and only then consider removing the passkey. The walk-through on removing an Android screen lock covers the lock-screen side if you suspect the phone itself is exposed.

If you are setting up the same flow for an iPhone in the household, our guide on how to set up passkeys on iPhone covers the iCloud Keychain equivalent.

#Bottom Line

Create your first Android passkey for your Google account, not a random forum login. The Google account is the master key for Gmail, YouTube, Google Pay, Android backups, and the Play Store, so a phishing-resistant passkey there pays off across the rest of your digital life within the first week.

Keep the original Google password active for the first 30 days as a fallback while you confirm the passkey syncs to a second Android device and signs in cleanly from a Windows or Mac browser over the QR flow. After that, switch the account to passkey-first sign-in and add at least one trusted recovery contact to the Google account so a lost phone never becomes a lockout.

#Frequently Asked Questions