

When a Google user logs in to their account using a passkey, Google checks if the website has a corresponding public key. Websites have no access to the value of the passkey. The public key is stored on the side of the app or website, while the private key, a main component of the passkey, is stored on the device. Passkeys are generated using public-key cryptography, or asymmetric encryption, which involves using a pair of public and private keys. In a recent blog post, the tech giant introduced the option to create and use a safer, more convenient alternative to passwords: Passkeys, a form of digital credential. So, how do they work?

Google has just brought users closer to a passwordless future.
