Passkey manager and passwordless login

A passkey is a login credential that replaces a password with a cryptographic key pair. The private key stays on the device or in a password manager like Bitwarden, and the website stores only a public key, so there is nothing to phish or reuse.

Creating a passkey generates a unique key pair for that website. At login, the site issues a challenge, and the device signs it after the user confirms with a fingerprint, face recognition, device passcode, or security key.

Passwordless is the broad category of login methods that skip typing a password, including biometrics, login with device, and single sign-on. Passkeys are one passwordless method built on the FIDO2 and WebAuthn standards, and they are phishing-resistant by design.

Passkeys saved in Bitwarden live in the vault, not on one device. Log in to Bitwarden on a new phone or computer and every passkey is there. Passkeys stored only in a phone or browser outside Bitwarden are recovered through that account instead.

No. Keep using passwords while you add passkeys one account at a time. When a site offers to create a passkey, save it in Bitwarden. The password stays as a backup until you are comfortable.

Choose the Bitwarden prompt. To make it the only one, turn on Ask to save and use passkeys in the Bitwarden browser extension, then turn off the browser's own option to offer to save passwords and passkeys.

Passkeys are unique to every site and cannot be guessed. That helps protect against phishing and credential reuse.

Yes. Bitwarden stores passkeys in the encrypted vault, syncs them across browsers, desktops, and mobile devices, and lets teams share them through collections.