Guide 07 · Account guide
Passkeys: sign in without a password
What a passkey is, why it's the safest way into GMPro, and how to set one up on your iPhone, Android phone, Mac, or Windows PC.
A passkey lets you sign in to GMPro the same way you unlock your phone — with your face, your fingerprint, or the PIN or screen lock you already use. There's no password to make up, remember, or type, and nothing to write on a sticky note.
When you add a passkey, your device creates a unique digital key that works only for GMPro, and only on the real GMPro site. The secret half of that key never leaves your device — GMPro keeps just the matching half, which is useless to a thief on its own. Your face or fingerprint is simply how your device confirms it's really you holding it; that information stays on your device and is never sent to GMPro.
Why passkeys are safer than passwords
- Nothing to steal
- GMPro never stores your passkey's secret, so no data breach can leak it. The secret stays sealed inside your device — even we can't read it.
- Nothing to phish
- A passkey only answers to the real GMPro website. A look-alike site — however convincing the email that led you there — gets nothing. A password stays secret only until someone is tricked into typing it; a passkey can't be tricked.
- Nothing to guess or reuse
- There's no word or phrase to guess, so weak passwords, pet names, and the same password reused across sites stop being a risk. Every passkey is unique and random.
- Your face stays yours
- GMPro never sees your face, fingerprint, or PIN. Your device checks that it's you, then simply tells GMPro “confirmed.”
Where a passkey lives
A passkey is saved on the device where you create it — and on some devices it travels with your account.
| If you save it on… | You approve with… | It also works on… |
|---|---|---|
| iPhone or iPad | Face ID, Touch ID, or your passcode | your other Apple devices, via iCloud Keychain |
| Android phone or tablet | fingerprint, face, or screen lock | other devices signed in to your Google account |
| Mac | Touch ID or your computer password | your iPhone and iPad, via iCloud Keychain |
| Windows PC | Windows Hello: face, fingerprint, or PIN | usually just that PC — add one on your phone too |
You can add as many passkeys as you like — one per device you use often is a good habit. Your emailed codes and password keep working either way.
- 1
Know what to expect
Whenever GMPro asks for a passkey — while you're creating one or signing in with one — your device shows a small prompt like this. Approve it with your face, fingerprint, or PIN and you're done. That's the entire process, every time. The next steps show what the prompt looks like on each kind of device.
- 2
Add a passkey from Profile & security
Sign in to GMPro as you normally would — an emailed code works fine. Click your avatar in the top-right corner, choose “Profile & security,” find the Passkeys card, and click “Add a passkey.” Your device takes it from there; the next four steps show what each kind of device asks.
- 3
On an iPhone or iPad
Your browser asks to save a passkey for GMPro and confirms with Face ID, Touch ID, or your passcode. The passkey is stored in your iCloud Keychain, so it's automatically available on every device signed in to your Apple account — lose the phone and the passkey is still yours.
Don't see the prompt? Make sure iCloud Keychain is on: Settings → your name → iCloud → Passwords (or Keychain).
- 4
On an Android phone or tablet
Android asks to create a passkey and saves it to your Google Password Manager, confirming with your fingerprint, face, or screen lock. Because it's tied to your Google account, the passkey follows you to other devices where you're signed in.
Your phone needs a screen lock set up first — if it doesn't have one, Android walks you through adding it.
- 5
On a Mac
Safari or Chrome asks to save a passkey and confirms with Touch ID — or your computer password on a Mac without Touch ID. Saved through iCloud Keychain, the same passkey also appears on your iPhone and iPad.
Using Chrome? It may offer to save the passkey to your Google profile instead of iCloud Keychain — either works, and the prompt tells you which it's using.
- 6
On a Windows PC
A “Windows Security” window sets up the passkey with Windows Hello — your face, your fingerprint, or your PIN. A Windows Hello passkey stays on that computer, so if you also work from a phone, add a passkey there too.
No camera or fingerprint reader? The PIN option works on every Windows PC — and a Hello PIN never leaves your computer, which makes it safer than it sounds.
- 7
Next time: sign in with one tap
On the sign-in page, choose “Sign in with a passkey” — it's offered right below the email box, and again as a method choice after you enter your email. Approve your device's prompt and you're in: no code to wait on, no password to type. A passkey even counts as two-step verification all by itself.
- 8
At a computer that doesn't have your passkey? Use your phone
Choosing passkey sign-in on a shared or borrowed computer may show a QR code. Scan it with your phone's camera, approve the prompt on your phone, and the computer signs you in — your passkey never leaves your phone. Both devices need Bluetooth turned on: that's how the computer proves your phone is actually in the room, which is part of what keeps this safe.