SEO Title

How to create a Google Account passkey on Android

Google Account passkey: how to create it on Android and when 2FA still matters

If you want to stop relying on passwords and SMS every time you sign in, the short answer is this: you can create a Google Account passkey directly on Android, using your fingerprint, face unlock, or device PIN [F1]. The important part is that this does not remove your other account protections. Google's help documentation says that if your account already uses 2-Step Verification or Advanced Protection, a passkey can bypass the second step because it already proves you own the device, but the older factors remain on the account [F1].

The most useful current signal for this topic came on June 1, 2026, when Google's Google Play services v26.21 release notes said Android can now import and export passwords and passkeys between Google Password Manager and third-party managers through the Credential Exchange standard [F4]. That makes this topic more practical now: passkeys are increasingly part of normal Android account-management workflows, not just an early-adopter feature.

Quick answer

  1. On Android, open myaccount.google.com/signinoptions/passkeys and tap Create a passkey [F1].
  2. Unlock the phone with your fingerprint, face, or PIN [F1].
  3. Only create a passkey on a device you personally own and use, because anyone who can unlock that device may be able to sign in to your Google Account there [F1].
  4. Keep 2-Step Verification enabled even if you use a passkey, because Google still recommends it as an added safeguard [F3].
  5. If the new passkey does not show up right away at sign-in, Google says you may need to wait up to 7 days before a newly created passkey is fully trusted in some flows [F1].

If you want the rest of the same account-security path, continue with How to Turn On Google Two-Step Verification on Android Without Losing Access, How to Generate Google Account Backup Codes and Recover Access Without Your Phone, How to Check Google Account Devices and Sign Out Suspicious Access, How to turn on Advanced Protection on Android, and How to turn on Android theft protection.

What a Google Account passkey actually is

A passkey is a sign-in method that uses your device screen lock instead of making you type your password every time. According to Google's official help, you can sign in with:

  • fingerprint;
  • face unlock;
  • phone screen lock such as a PIN [F1].

The practical upside is twofold:

  • passkeys are more phishing-resistant than passwords or texted verification codes [F1][F3];
  • sign-in becomes faster because it feels close to unlocking your phone [F3].

My editorial inference from the primary sources is this: for ordinary Android users, a passkey works best as the primary everyday sign-in method, while 2FA, backup codes, and device review still act as the recovery and containment layer for lost phones, shared devices, or suspicious access.

4 things to check before you create one

1. Your phone must be supported

Google lists Android 9 or later as supported for passkeys [F1].

2. Screen lock must be on

If screen lock is turned off, you cannot use the passkey on that device [F1].

3. The device should be personal

Google's help is explicit: do not create a passkey on a shared device. Even if you sign out of your Google Account, someone who can still unlock that phone may be able to access the account there [F1].

4. Bluetooth may matter for cross-device sign-in

If you want to use the Android phone to sign in on another computer through a QR code flow, Google says Bluetooth should be turned on [F1].

How to create the passkey on Android

1. Open the correct page

Go to myaccount.google.com/signinoptions/passkeys [F1].

2. Tap create

Tap Create a passkey and confirm again if prompted [F1].

3. Unlock your device

Android will ask for your fingerprint, face, or PIN. This is the step that binds the passkey to the device [F1].

4. Repeat on other personal devices

If you use more than one phone or also want a passkey on a computer, Google's instructions say to repeat the process on each device where you want one [F1].

What changes after the first passkey

Once your first passkey exists, Google may suggest passkeys in future compatible sign-in combinations [F1]. For personal accounts, that pushes the account toward a passkey-first flow with less dependence on typing a password [F1].

Three limits still matter:

  1. your password is still part of the account;
  2. you can still choose Try another way when needed [F1];
  3. a newly created passkey may take up to 7 days to become fully trusted in some sign-in flows [F1].

If that recovery angle worries you, pair this with How to Generate Google Account Backup Codes and Recover Access Without Your Phone.

Does a passkey replace 2-Step Verification?

Not in the simplistic way many short tips imply.

Google's help says that if your account already has 2-Step Verification or Advanced Protection, a passkey can bypass the second step because unlocking the device already proves possession [F1]. But in the official World Password Day 2026 post, Google also says it is still important to keep 2SV enabled as an added safeguard [F3].

The practical model is:

  • use a passkey for stronger, easier daily sign-in;
  • keep 2-Step Verification to raise the bar against impersonation;
  • keep backup codes so you are not dependent on the phone alone;
  • review connected devices so old or suspicious sessions do not linger.

When a passkey is especially worth enabling

It is worth doing now if:

  • you use a personal Android phone with strong screen lock;
  • you often sign in to your Google Account on laptops or desktops;
  • you want less phishing exposure from password entry;
  • you already use Google prompts and want an even faster sign-in path [F2];
  • you want to rely less on SMS.

Google prompts still matter because Google recommends them over SMS on Android to reduce phone-number-based account hacking [F2]. A passkey does not replace that recommendation; it complements it.

When you should pause first

Avoid setting it up impulsively if:

  • the phone is shared with other people;
  • your screen lock is weak or easy to guess;
  • you have not organized account recovery yet;
  • you think passkeys remove the need for device review, backup codes, or 2SV.

For school or work accounts, Google also says Google Workspace users may not be allowed to sign in with only a passkey. In those cases, the passkey may still work as a second factor, recovery method, or confirmation for sensitive actions [F1].

How to use your Android phone to sign in on a computer

If the passkey already exists on your phone, Google's official flow is [F1]:

  1. open the Google sign-in page on the computer;
  2. enter your username;
  3. click Try another way and then Use your passkey;
  4. scan the QR code with your Android phone;
  5. confirm your identity on the phone itself.

Google says that after this first pairing, future sign-ins on the same computer and phone combination may become more direct [F1].

How to remove a passkey if the phone is lost

If the device was lost, stolen, or shared by mistake, Google's help gives two paths [F1]:

For a passkey you created manually

  1. Open your Google Account;
  2. go to Security & sign-in;
  3. open Passkeys and security keys;
  4. select the passkey;
  5. choose Remove [F1].

For a passkey automatically created by an Android device

  1. Open Google Account;
  2. go to Your devices;
  3. open Manage all devices;
  4. choose the device;
  5. tap Sign out [F1].

After that, it is worth reviewing How to Check Google Account Devices and Sign Out Suspicious Access and, if there is real loss or theft risk, How to turn on Android theft protection.

One newer Android signal that makes this topic more mature

The Google Play services v26.21 release notes, published for the week of June 1, 2026, say Android can now import and export passwords and passkeys between Google Password Manager and third-party managers through the Credential Exchange standard [F4].

My editorial takeaway: this does not change the passkey-creation steps for your Google Account, but it reduces the lock-in fear. For many users, one hesitation was thinking the passkey would feel trapped inside a single password manager.

Short checklist

  • [ ] My Android phone has a strong screen lock enabled.
  • [ ] The device is personal, not shared.
  • [ ] I created the passkey at myaccount.google.com/signinoptions/passkeys.
  • [ ] I kept 2-Step Verification and backup codes as my safety net.
  • [ ] I know how to remove the passkey and sign out of the device if it is lost.

Quick FAQ

Does a passkey remove my Google Account password?

No. Google still lets you sign in with a password and other methods, and you can turn off Skip password when possible if you prefer [F1].

Is a passkey better than SMS?

Yes as a general security direction. Google says passkeys are more phishing-resistant, and it also recommends Google prompts over SMS to reduce phone-number-based code theft [F1][F2].

Can I create a passkey for a work or school account?

Maybe, but policy can differ. Google's documentation says Google Workspace users may not always be allowed to sign in with only a passkey, even though the passkey can still work as a second factor or recovery method [F1].

If I lose my Android phone, do I lose the account?

You should not, if your recovery setup is sound. That is why keeping 2SV, backup codes, and device review in place still matters [F1][F3].

Sources

  • [F1] Google Account Help - Sign in with a passkey instead of a password, verified August 31, 2026: https://support.google.com/accounts/answer/13548313?hl=en
  • [F2] Google Account Help - Sign in with Google prompts (Android), verified August 31, 2026: https://support.google.com/accounts/answer/7026266?co=GENIE.Platform%3DAndroid&hl=en
  • [F3] Google Blog - World Password Day: Keep your passwords and accounts safe with these 5 Google products, published May 1, 2026 and verified August 31, 2026: https://blog.google/innovation-and-ai/technology/safety-security/world-password-day-2026/
  • [F4] Google System Services Release Notes - Google Play services v26.21, published for the week of June 1, 2026 and verified August 31, 2026: https://support.google.com/product-documentation/answer/14343500?hl=en

Editorial notes

  • Last editorial verification: August 31, 2026.
  • Menu names and prompts vary by language, device maker, and personal account versus Workspace account.
  • This article combines official Google Account and Android documentation with explicit editorial inference for safer setup and recovery decisions.