Who supports passkeys? Five services and the limits to check
Google, Microsoft, PayPal, Amazon Shopping and GitHub support passkeys. Here is where to start, which account limits matter, and what to check before switching.
On this page
Five places you can start
Google, Microsoft, PayPal, Amazon Shopping and GitHub all support passkeys. That means you can sign in with a saved digital credential, which can be confirmed with your device’s face scan, fingerprint or screen-lock PIN. Support still depends on the account, device and browser you use. [1] [2] [3] [4] [5]
Use this as a short starting list, not a catalogue of every compatible website. The details below were checked against official documentation on 13 October 2026; PayPal’s requirements here apply to the US. [3] [6]
Passkey support: where to start and what to check
Find the service you use, then check the restriction before starting setup. A work account can have different rules from a personal account with the same brand name. [1] [2]
| Service | Where to start | Important limit |
|---|---|---|
| Follow Google’s passkey setup instructions in Sources | Compatible software and a screen lock required; Workspace administrators can restrict passwordless sign-in. [1] | |
| Microsoft | Personal account → Advanced Security Options | Work or school accounts need organizational support; allowed storage options can differ. [2] |
| PayPal (US) | Official passkey setup instructions linked in Sources | Eligible accounts can use supported apps or browsers; check the exact software pairing. [3] |
| Amazon Shopping | Your Account → Login & Security → Passkeys | Web and iOS/Android shopping apps; a supported device or browser is still needed. [4] |
| GitHub | Settings → Password and authentication → Add a passkey | For personal accounts where you manage your own credentials. [5] |
PayPal supports browsers, not just its app
For example, PayPal lists Safari 16.1 or later and Chrome 118 or later on macOS Ventura or later. On Windows 10 or later, it lists Edge 108 or later and Chrome 108 or later. These are minimum combinations in its US help page, not a reason to keep using old software. [3]
If you do not see a prominent passkey button, check the sign-in flow described by PayPal: passkey autofill can appear on the password-entry page. Your account must be eligible, and the saved key must be available on the device or in its password manager. [3] [1] [2]
The website and the place you save the passkey are different
Think of two separate questions: “Does this account accept passkeys?” and “Where will I keep mine?” A service supporting passkeys does not mean every storage option will work for every account. Microsoft, for example, offers several choices and lets organizations restrict work-account methods. [2]
Microsoft lists its Password Manager for synced passkeys on personal accounts: keys backed up through the storage provider’s account. Other options include a phone, a physical security key or Windows Hello, Windows’ built-in sign-in system. Read the storage prompt carefully. A device-bound key stays on one device; it is not automatically backed up to another. [2] [5]
Before you switch: a short checklist
Start with one account and confirm you can use the new sign-in method before changing anything else. Adding a passkey to Google, for example, does not automatically remove its existing authentication or recovery methods. [1]
- Check the account type. For a work or school account, follow your organization’s allowed methods. [1] [2]
- Check software compatibility in the service’s own instructions, not just a generic “supports passkeys” list. [1] [2] [3]
- Know where the key is saved. A synced key and one tied to a single physical device have different recovery paths. [2] [5]
- Plan for a lost device. GitHub recommends registering at least two devices if you rely only on device-bound passkeys. [5]
- Keep recovery access available while you verify setup. Do not assume adding a passkey makes every other sign-in method unnecessary. [1] [5]
If your service or passkey option is missing
Look up other services in the FIDO Alliance Passkeys Directory, then open that service’s own setup instructions. The directory is not exhaustive, so absence from it alone does not prove that a service lacks support. [6]
If the setup option is missing, check account restrictions and device/browser requirements first. If you already created a key but it is not offered at sign-in, check where it is saved and whether it is available on this device. For an organization-managed account, ask its administrator which methods are enabled. [1] [2] [3]
