How to log in to PayPal with a passkey

What are passkeys?

Passkeys are a new secure login standard created by the FIDO Alliance and the World Wide Web Consortium. A passkey allows you to securely log in to PayPal without entering a password. Instead, passkeys allow you to log in to PayPal using the same biometrics or device password you use to unlock your device. Passkeys are unique to you and are bound to a website or app's identity, making passkeys resistant to phishing and hacking attempts. Additional authentication steps may be required, such as using a remembered device or confirming a phone via one-time passwords (OTP).

Who can set up a passkey?

Passkeys are currently available for eligible personal and premier accounts. Passkeys can only be created on devices for which you have set up a screen lock with Chrome (Android or Apple devices) and Safari (Apple devices only) browsers.

How are passkeys different from a password?

A passkey is a digital credential tied to a user account and a website or application. Passkeys allow users to authenticate securely without entering a username or password. 

Once created, passkeys are synced with your iCloud Keychain or Google Password Manager, ensuring a robust and private relationship between you and your device. Unlike passwords, which require you to create, remember and enter your information to log in, you do not have to type or enter your passkey.

Passkeys are backed up and protected from loss; if you get a new device, it can quickly be restored. While passkeys remove the need to enter the PayPal password, PayPal will continue to perform additional authentication steps (such as using a remembered device or confirming a phone via one-time passwords (OTP)).

How do I know if the passkey feature is available to me?

Here’s how to enrol for the first time on your mobile device:

1. Log in to PayPal from your mobile device from either Safari or Chrome browsers using your existing PayPal credentials.
2. If available, you will see the option to “Create a passkey”. Once the information is reviewed, click Next.
3. Review the details and to give permission, click Continue.
4. You will be prompted to unlock your device to create a passkey.

On iPhones, you can use Face ID, Touch ID or passcode to unlock your device. On Android devices, you can use the face or fingerprint scan, PIN or pattern to unlock your device (depending on what device lock is set up on your device). You should be automatically directed to your PayPal home screen when completed.

What happens if my device is lost or stolen?

If your device is lost or stolen, you can still log in to PayPal with your password and/or a one-time passcode. Your account with PayPal cannot be accessed without first unlocking your lost or stolen device. As an extra precaution, you can also log in to PayPal from another device and remove the passkey from your account.

How do I remove my passkey from my account?

You can remove your passkey in the Security settings within your account through PayPal.com. However, this action will not remove the passkey from your device.

On an Apple device, please follow these steps to remove the passkey from your device:

1. On your Apple device, choose System Settings, then click Passwords in the sidebar. (You may
   need to scroll down.)
2. Click the Info button for PayPal.com.
3. Click Edit.
4. Click Delete Passkey.
5. Click Delete Passkey (again).

On an Android device, follow these steps to remove a passkey from your device:

1. On your Android device, choose Settings, then click Passwords Manager in the sidebar. (You
   may need to scroll down.)
2. Click the entry for PayPal.com. (You may need to scroll down to find the entry for PayPal.).
3. Unlock your device if you're prompted to do so.
4. Click Delete for the passkey listed for PayPal.
5. Click Delete (again) on the pop-up dialogue.

How do I use my existing passkey across all my devices?

Log in to PayPal on your Apple (iPhones, Macs and iPads) or Google (Android only)
device with a passkey stored on that device.

1. If your email address is not remembered on the PayPal login page, type in your email address and click next to
   initiate the login with a passkey. If your email address is remembered, click the login button to start the
   login with a passkey.
2. Follow the onscreen instructions to confirm your identity by unlocking your device.

Log in to PayPal on a device with a passkey stored on your phone (iPhone or
Android phone).

iPhones store your passkeys on an iCloud keychain, so they are automatically used whenever you are
logged in with the same Apple ID on another device (iOS 16, iPadOS 16, macOS Ventura or tvOS 16
required). Similarly, Android phones store your passkeys in Google Password Manager, so they are
automatically used whenever you are logged in with the same Google account across all your Android
devices (Android 9+).

However, if you use a device not associated with the same Apple ID or Google Account, you can still log
in to PayPal using the passkey stored on your phone. To log in with a passkey on such a
device, follow these steps:

1. If your email address is not remembered on the PayPal login page, type in your email address and click Next to
   initiate the login with a passkey. If your email address is remembered, then click on the login button to
   start the login with a passkey.
2. Choose Other options, “Passkey from a nearby device”, or similar on the pop-up screen, and
   then follow the onscreen instructions to display a QR code on the screen.
3. Follow the onscreen instructions to scan the QR code with a phone with the passkey for
   PayPal.
4. Finish the onscreen instructions on your phone to approve the login on the nearby device.

Which technology providers support passkeys?

Today, passkeys for PayPal are supported by Safari and Chrome web browsers on Apple devices running iOS 16, iPadOS 16, macOS Ventura and Google devices running Android 9+. Passkeys are not supported on web view browsers and Windows devices. On a Windows device, the user must use a password or SMS OTP to log in.

Can I use a passkey on a non-supported device?

No, passkeys can’t be used on non-supported devices or web browsers.

Once I create a passkey, do I have to enter a password with PayPal again?

Once you create a PayPal passkey, you can use it as your primary login method. You may see other Log-in options if your operating system, device or browser does not meet eligibility requirements or if you are in a country where passkeys are unavailable.

What if my passkey fails?

You will receive an error message and be prompted to log in using an alternative login method.

What if I want to revert to my password? How do I do that?

During login, click “Try Another Way” to see all, including the password. You can turn off your passkey in the Security settings within your account through PayPal.com.

With passkeys, does PayPal now have my biometric data?

No. Your biometric data is not shared with PayPal and never leaves your device.

Will I still need a second factor of authentication?

Passkey logins will be one of two factors for authentication. You’ll need to unlock your device using either the PIN, pattern or biometrics available, and then you may be prompted to complete a secondary challenge (e.g., SMS OTP) if you are not on your remembered/trusted device.