The Sunday letter · MyTextStoryIssue 01081522283337404345474848
MyTextStory.
Loading the fixes
Solutions
Stop password hacks: how to set up passkeys
The simple fix for stolen and phished passwords: what passkeys are, and how to turn them on for your important accounts.
- KindSolutions
- DateOct 12, 2026
- Read time7 min
Solutions
Stop password hacks: how to set up passkeys
The simple fix for stolen and phished passwords: what passkeys are, and how to turn them on for your important accounts.
- KindSolutions
- DateOct 12, 2026
- Read time7 min
Solutions
Stop password hacks: how to set up passkeys
The simple fix for stolen and phished passwords: what passkeys are, and how to turn them on for your important accounts.
- KindSolutions
- DateOct 12, 2026
- Read time7 min
SolutionsOct 12, 20267 min read
If an app has recently asked you to “create a passkey”, you are not alone. Passkeys are a newer way to sign in that replaces your password with the same fingerprint, face or PIN you already use to unlock your phone. The biggest platforms support them, and more apps add them every month.
The idea is simple: passwords get stolen, reused and phished every day. A passkey cannot be typed into a fake website, cannot be guessed and is never stored on the company’s servers in a form that hackers can use.
How a passkey works
When you create a passkey, your phone makes a pair of digital keys. One stays private on your device, protected by your screen lock. The other is shared with the website or app. When you sign in, the two keys check each other, and you only confirm with your fingerprint, face or PIN.
Passkeys are saved in Google Password Manager or iCloud Keychain, so they sync to your other devices signed in to the same account. Lose your phone, and your passkeys come back when you sign in on a new one.
“A passkey cannot be phished, because there is nothing for you to type into a fake page.
Why it matters
Most account takeovers start with a stolen or reused password. Because a passkey only works on the real website it was made for, the fake login pages used in scam messages simply do not work against it.
It is also faster. No more resetting forgotten passwords or waiting for a code by text: one touch and you are in.
Should you switch?
Yes, for your most important accounts: your Google or Apple account, e-mail, banking and shopping. Look for “passkey” in each account’s security settings and follow the steps. Keep your phone’s screen lock strong, because it now protects your passkeys too.
You do not have to switch everything at once. Passwords keep working alongside passkeys, so add them one account at a time as apps ask, and keep a password manager for the rest.
— MyTextStory
All posts
SolutionsOct 12, 20267 min read
If an app has recently asked you to “create a passkey”, you are not alone. Passkeys are a newer way to sign in that replaces your password with the same fingerprint, face or PIN you already use to unlock your phone. The biggest platforms support them, and more apps add them every month.
The idea is simple: passwords get stolen, reused and phished every day. A passkey cannot be typed into a fake website, cannot be guessed and is never stored on the company’s servers in a form that hackers can use.
How a passkey works
When you create a passkey, your phone makes a pair of digital keys. One stays private on your device, protected by your screen lock. The other is shared with the website or app. When you sign in, the two keys check each other, and you only confirm with your fingerprint, face or PIN.
Passkeys are saved in Google Password Manager or iCloud Keychain, so they sync to your other devices signed in to the same account. Lose your phone, and your passkeys come back when you sign in on a new one.
“A passkey cannot be phished, because there is nothing for you to type into a fake page.
Why it matters
Most account takeovers start with a stolen or reused password. Because a passkey only works on the real website it was made for, the fake login pages used in scam messages simply do not work against it.
It is also faster. No more resetting forgotten passwords or waiting for a code by text: one touch and you are in.
Should you switch?
Yes, for your most important accounts: your Google or Apple account, e-mail, banking and shopping. Look for “passkey” in each account’s security settings and follow the steps. Keep your phone’s screen lock strong, because it now protects your passkeys too.
You do not have to switch everything at once. Passwords keep working alongside passkeys, so add them one account at a time as apps ask, and keep a password manager for the rest.
— MyTextStory
All postsSolutionsOct 12, 20267 min read
If an app has recently asked you to “create a passkey”, you are not alone. Passkeys are a newer way to sign in that replaces your password with the same fingerprint, face or PIN you already use to unlock your phone. The biggest platforms support them, and more apps add them every month.
The idea is simple: passwords get stolen, reused and phished every day. A passkey cannot be typed into a fake website, cannot be guessed and is never stored on the company’s servers in a form that hackers can use.
How a passkey works
When you create a passkey, your phone makes a pair of digital keys. One stays private on your device, protected by your screen lock. The other is shared with the website or app. When you sign in, the two keys check each other, and you only confirm with your fingerprint, face or PIN.
Passkeys are saved in Google Password Manager or iCloud Keychain, so they sync to your other devices signed in to the same account. Lose your phone, and your passkeys come back when you sign in on a new one.
“A passkey cannot be phished, because there is nothing for you to type into a fake page.
Why it matters
Most account takeovers start with a stolen or reused password. Because a passkey only works on the real website it was made for, the fake login pages used in scam messages simply do not work against it.
It is also faster. No more resetting forgotten passwords or waiting for a code by text: one touch and you are in.
Should you switch?
Yes, for your most important accounts: your Google or Apple account, e-mail, banking and shopping. Look for “passkey” in each account’s security settings and follow the steps. Keep your phone’s screen lock strong, because it now protects your passkeys too.
You do not have to switch everything at once. Passwords keep working alongside passkeys, so add them one account at a time as apps ask, and keep a password manager for the rest.
— MyTextStory
All posts