All guides

Your account · Account guide

Passkeys: sign in without a password

What a passkey is, why it's the safest way into GMPro, and how to set one up on your iPhone, Android phone, Mac, or Windows PC.

5 of 8 steps on your routeYour route: Android

A passkey lets you sign in to GMPro the same way you unlock your phone — with your face, your fingerprint, or the PIN or screen lock you already use. There's no password to make up, remember, or type, and nothing to write on a sticky note.

When you add a passkey, your device creates a unique digital key that works only for GMPro, and only on the real GMPro site. The secret half of that key never leaves your device — GMPro keeps just the matching half, which is useless to a thief on its own. Your face or fingerprint is simply how your device confirms it's really you holding it; that information stays on your device and is never sent to GMPro.

Your route

Where will you use your passkey?

Showing the 5 steps for “Android”.

Show every route

Why passkeys are safer than passwords

Nothing to steal
GMPro never stores your passkey's secret, so no data breach can leak it. The secret stays sealed inside your device — even we can't read it.
Nothing to phish
A passkey only answers to the real GMPro website. A look-alike site — however convincing the email that led you there — gets nothing. A password stays secret only until someone is tricked into typing it; a passkey can't be tricked.
Nothing to guess or reuse
There's no word or phrase to guess, so weak passwords, pet names, and the same password reused across sites stop being a risk. Every passkey is unique and random.
Your face stays yours
GMPro never sees your face, fingerprint, or PIN. Your device checks that it's you, then simply tells GMPro “confirmed.”

Where a passkey lives

A passkey is saved on the device where you create it — and on some devices it travels with your account.

If you save it on…You approve with…It also works on…
iPhone or iPadFace ID, Touch ID, or your passcodeyour other Apple devices, via iCloud Keychain
Android phone or tabletfingerprint, face, or screen lockother devices signed in to your Google account
MacTouch ID or your computer passwordyour iPhone and iPad, via iCloud Keychain
Windows PCWindows Hello: face, fingerprint, or PINusually just that PC — add one on your phone too

You can add as many passkeys as you like — one per device you use often is a good habit. Your emailed codes and password keep working either way.

Jump to a step (5)

Steps

  1. 1

    Know what to expect

    Whenever GMPro asks for a passkey — while you're creating one or signing in with one — your device shows a small prompt like this. Approve it with your face, fingerprint, or PIN and you're done. That's the entire process, every time. The next steps show what the prompt looks like on each kind of device.

  2. 2

    Add a passkey from Profile & security

    Sign in to GMPro as you normally would — an emailed code works fine. Click your avatar in the top-right corner, choose “Profile & security,” find the Passkeys card, and click “Add a passkey.” Your device takes it from there; the next four steps show what each kind of device asks.

  3. 3

    On an Android phone or tablet

    Android asks to create a passkey and saves it to your Google Password Manager, confirming with your fingerprint, face, or screen lock. Because it's tied to your Google account, the passkey follows you to other devices where you're signed in.

    Your phone needs a screen lock set up first — if it doesn't have one, Android walks you through adding it.

  4. 4

    Next time: sign in with one tap

    On the sign-in page, choose “Sign in with a passkey” — it's offered right below the email box, and again as a method choice after you enter your email. Approve your device's prompt and you're in: no code to wait on, no password to type. A passkey even counts as two-step verification all by itself.

  5. 5

    At a computer that doesn't have your passkey? Use your phone

    Choosing passkey sign-in on a shared or borrowed computer may show a QR code. Scan it with your phone's camera, approve the prompt on your phone, and the computer signs you in — your passkey never leaves your phone. Both devices need Bluetooth turned on: that's how the computer proves your phone is actually in the room, which is part of what keeps this safe.