How it works
A device or credential manager stores the private key; you authorise its use through a supported method, such as unlocking the device. It is not a code to tell another person. Consider who else can unlock the device or use saved credentials. Check requirements and recovery in the particular service’s official help.
What to check and do
- Identify whether the device is personal and who else can unlock it.
- Read the service’s official guidance on supported devices and passkey storage. Follow your organisation’s rules on a work device.
- Understand the official alternative sign-in route in advance. Do not remove existing protection methods for this learning exercise.
Learning scenario
Fictional scenario: a learning service offers to save a passkey on a shared computer. Other people can also unlock this computer. Your personal phone is nearby. No real accounts or keys are used here.
Self-check
Your answer stays on this page until it is closed or reloaded. No real passwords, codes or documents are needed. The result is not a security certificate.
Important limits
Sign-in and recovery methods depend on the service, device and organisation’s rules. This lesson does not change account protection or claim that SQIF Capital offers passkeys. Do not create keys or change real settings for the exercise; do not enter passwords, codes, digital-signature keys or documents. A sign-in method does not guarantee the safety of the whole transaction.
Primary sources
- NCSC · Passkeys: what you need to know
- Google Account Help · Sign in with a passkey instead of a password
Learning materials can reduce mistakes but do not guarantee protection from every threat. Not investment advice.