Google passkey: what it is and where it can be stored
SHORT ANSWER
What is a Google passkey?
A Google passkey is a passkey for your Google Account. It lets you sign in with your fingerprint, face or screen lock instead of a password. Google lets you create it on your current device, and where it is stored depends on the passkey provider your device uses.
Key takeaways
- A passkey replaces the password for your Google Account and cannot be phished the way a password can.
- Where it lives depends on the provider: Google Password Manager syncs, a local provider does not.
- A device-only passkey is lost with the device, so keep another sign-in method.
- You manage your passkeys in your Google Account security settings.
Disclosure: HostSpica makes HostSpica Identity, an Android app that is also a passkey provider. Facts about other services come from their own help pages, checked on 4 October 2026, and can change.
What Google offers
Google's help says you can create a passkey for your account at myaccount.google.com/signinoptions/passkeys and unlock it with your device. It also describes security keys as another place to keep one. You can then choose to sign in without typing a password.
Where the passkey is stored
| Google Password Manager | HostSpica Identity | |
|---|---|---|
| Sync to other devices | Yes, with your Google Account | No, stays on the phone |
| Account needed | Google Account | No account |
| Restore on a new phone | Yes | No. Create a new passkey. |
| Where keys live | Google's provider on Android | Android Keystore on this phone |
| Android version | Recent Android and Chrome | Android 14 or newer |
Neither is wrong. Synced passkeys are convenient and recoverable. Local passkeys keep everything on one device and ask you to plan for loss. For the reasoning see passkeys from first principles.
Using HostSpica Identity for your Google Account
We have tested HostSpica Identity passkeys on Google, GitHub, Microsoft and webauthn.io in Chrome and Brave, including creating a passkey, signing in and the duplicate-passkey check. We have not tested every site, and no site is guaranteed to accept it. Sign-in with a passkey held by HostSpica Identity worked for Google in those tests.
HostSpica Identity needs Android 14 or newer for passkeys. Its Google Play release is in the final steps as of 4 October 2026, so check the app page for the live link.
Keep your account recoverable
- Keep a second sign-in method such as a security key or recovery codes.
- Add passkeys on more than one device if you can.
- Keep your recovery phone and email current.
Frequently asked questions
Does Google support passkeys?
Yes. Google's Account Help describes creating and using passkeys.
Can I use a non-Google passkey provider for Google?
On Android 14 or newer, apps can register with Credential Manager as providers. HostSpica Identity signed in to Google in our tests.
Will a passkey replace my password?
Google lets you keep your password, so a passkey can be an extra way in. Check your account's sign-in options.
What if I lose my phone?
Use another sign-in method, then add a new passkey. See what to do if you lose your phone.
References
Review status
Last technical self-review by the author on 4 October 2026. No independent reviewer yet. If you spot an error, write to [email protected] and we will correct it and note the change.
Rohan builds HostSpica's Android apps — Authenticator, Passkey and Identity — and writes up how they work, including the mistakes along the way.
ABOUT THE PRODUCTS
RELATED