2 min read
What a passkey is
A passkey is a modern replacement for the password. Instead of a secret you type, your device holds a cryptographic key and unlocks it with your fingerprint, face or device PIN. When you sign in, your device proves it holds the key without ever sending a password anywhere. There is nothing for a criminal to phish, guess or reuse.
Passkeys are built into modern iPhones, Android phones, Macs and Windows machines, and they sync securely across your own devices through your Apple, Google or Microsoft account.
Why it beats a password
- Cannot be phished. A fake login page has nothing to capture — the passkey only works on the real Credit Corp domain.
- Cannot be reused. Each passkey is unique to this account, so a breach elsewhere cannot expose it.
- Nothing to remember. Your device unlock is the only thing you need.
How to add one
- Sign in and open Security settings.
- Choose Add a passkey.
- Your device prompts you to confirm with fingerprint, face or PIN.
- The passkey is saved. Next time, you can sign in with just that unlock.
Add a passkey on each device you regularly use, or rely on your platform account to sync it across them.
Keep a backup way in
Even with a passkey, keep two-factor authentication and your recovery codes in place as a fallback for a device you do not have with you. If you replace all your devices at once, follow account recovery to re-establish access.
Frequently asked questions
Do passkeys work on every device?
They work on modern iPhones, Android phones, Macs and Windows PCs. Older devices may not support them — in that case, use a password plus two-factor authentication.
If I lose my phone, is my passkey gone?
If your passkey syncs through your Apple, Google or Microsoft account it is restored on your next device. Keep 2FA recovery codes as a backup in case it does not.
Can I use both a passkey and a password?
Yes. Adding a passkey does not delete your password; you can use whichever is convenient on a given device.
Related reading
Setting up an authenticator app for two-factor authentication
Two-factor authentication adds a second step to sign-in: after your password you enter a six-digit code from…
Read →
Securing your Credit Corp business account: the full guide
The single place to lock down your Credit Corp business account — covering the password, two-factor…
Read →
Managing trusted devices and active sessions
Your account keeps a list of the devices and browsers currently signed in. Reviewing it — and removing…
Read →
Choosing a strong passphrase for your business account
A passphrase — three or four unrelated words — is both stronger and easier to remember than the old-style…
Read →Funding for UK limited companies
Credit Corp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.