About passkeys

Passkeys are a new globally recognised identity standard to help users easily access secure services. For more details refer to the passkey notes below or search the internet for 'passkeys'.

• For a quick introduction, try this 30 second video from Google: https://www.youtube.com/watch?v=Z7YBTYjfbQ4
• This 4 minute video from Microsoft goes in to a bit more detail: https://www.youtube.com/watch?v=bdp8RdjV6PU

You can setup and use a 'passkey' on most modern desktop and laptop computers. Choose one of the following options:

• The Windows 'Hello' sign-in (or equivalent on other systems) - The 'Windows Hello' sign-in service is the simplest method to setup your first passkey. You can setup a simple PIN to use for signing in. If your desktop or computer device has a camera and or fingerprint reader, you should be able to use facial recognition or you can just tap your fingerprint reader instead.

• A mobile phone and a computer with Bluetooth - You can use a mobile phone to sign-in if it has a screen lock and both devices have Bluetooth too. Your desktop computer may not have Bluetooth available, but most laptops do. If your desktop doesn't have Bluetooth, you might be able to add this capability or use the 'Windows Hello' sign-in method instead. Note: you don't have to use a phone or mobile device, it's just one option!

• A hardware security key - You may prefer to use a hardware 'key device'. Any FIDO2 device should be compatible (e.g. Yubikey). Follow the device instructions to configure install/setup your key.

Only create passkeys on your personal or trusted devices that you control - anyone who can unlock your device could use your passkey to sign into a passkey enabled account as you. Use 'biometrics' such as fingerprint or face recognition to guard against this. Remember, it is important that you do not share your sign-in credentials with colleagues or anyone.