All guides
Identity & AccessProtect accounts

Set Up Passkeys for Business Accounts

Passkeys replace passwords with a phishing-resistant credential stored on your device. They stop attackers from stealing credentials through phishing or adversary-in-the-middle attacks.

Read time
7 min
Audience
Business owners and account owners
Last reviewed
2026-09-20

Before you start

  • ✓A modern device (phone or laptop) with biometrics or a hardware key
  • ✓Accounts that support passkeys (Google, Microsoft, GitHub, etc.)

Steps

  1. 1

    On each supported account, open security settings and look for "Passkeys" or "Add a passkey."

  2. 2

    Create the passkey on a device you always carry, such as your phone, using its screen lock or biometrics.

  3. 3

    Add the passkey to a second device or a hardware key (YubiKey) so you are not locked out if the first device is lost.

  4. 4

    Remove any legacy SMS-based MFA only after passkeys are confirmed working, and keep an authenticator app as a fallback if the service allows it.

  5. 5

    For shared business accounts, assign passkeys to individuals rather than sharing one device, so access stays attributable.

  6. 6

    Record where each passkey lives and who holds the backup, so offboarding and recovery stay simple.

References