Why You Should Avoid Creating Google Passkeys on Shared Devices
Create account passkeys on personally controlled devices and know how to remove them after device loss.
What is the problem?
Passkeys can reduce repeated password entry by relying on device authentication. But creating one on a computer that someone else can unlock may expose access to the account even after you sign out.
Step-by-step solution
Check ownership and screen-lock controls first
Google advises using passkeys only on devices you personally own and control. Verify that the phone or computer has a functioning screen lock before setup.
Create a passkey through the official account settings
Open Google's Security and sign-in settings and find Passkeys. Follow the device's authentication prompts; support depends on the operating system, browser and security hardware.
Know how to revoke a passkey after losing a device
If a device is lost or a passkey was created on a shared computer, open the Google Account passkey settings from another trusted device and remove the affected passkey. Review security notifications as well.
Alternative method
If passkeys are not available on a device, use one of the account's supported sign-in and recovery methods. Check recovery options before changing your setup.
Known limitations
Passkey support varies by platform and browser. A passkey retained on a lost or shared device requires specific revocation steps rather than assuming logout erased it.
Frequently asked questions
No. Signing out and removing a passkey stored on a device are different actions. Google advises against creating passkeys on shared devices.
Official primary sources
This article uses the official references below; consult them for the full guidance.
