What if a Passkey Device is Lost?

If a passkey device is lost, users can still access their accounts because passkeys are synchronized across the user's ecosystem, such as Apple iCloud Keychain, Google Password Manager, or via a third-party password manager (e.g. 1Password, Dashlane, Bitwarden).

This ensures that passkeys are available on all devices connected to the same account, meaning that losing one device does not lock you out of your accounts. However, it is important to secure your cloud account or third-party password manager with strong security measures like two-factor authentication (2FA) to protect your passkeys from unauthorized access.

---

Losing a device that holds your passkeys might seem alarming, but the way passkeys are designed ensures that you can still access your accounts without much hassle. Here’s how it works:

• Ecosystem Synchronization: Passkeys are not stored on a single device; instead, they are synchronized across the user's ecosystem (e.g. Apple iCloud Keychian or Google Password Manager) or third-party password manager (e.g. 1Password, Dashlane or Bitwarden). This means that if you lose one device, the passkeys are still available on other devices within the same ecosystem. For example, if you lose your iPhone but have an iPad or a MacBook connected to the same Apple ID, your passkeys will be available on those devices.

• Security Measures: While ecosystems make it easier to access your passkeys from multiple devices, it’s crucial to protect your ecosystem with strong security measures. This includes using a robust password for your primary account and enabling two-factor authentication (2FA). This way, even if someone gains access to your lost device, they would still need to bypass these additional security layers to access your passkeys.
• Recovery Options: In case all devices are lost or inaccessible, most ecosystems offer recovery options, such as using a recovery key or contacting support to regain access to your account. However, this process might vary depending on the ecosystem, so it's advisable to familiarize yourself with the recovery options provided by your specific ecosystem (Apple, Google, etc.).

To minimize the risk associated with losing a passkey device:

• Enable Two-Factor Authentication (2FA): Adding an extra layer of security to your ecosystem account can prevent unauthorized access even if a device is lost.
• Regularly Update Your Devices: Keeping your devices and software up to date ensures that you have the latest security patches and features that protect your passkeys.

---