Tech

How Do Passkeys Sync Between iPhone and Android Devices?

Rive News Research Desk

Published October 12, 2026 · 6 min read

By Rive News

Research desk | Rive News | Published October 12, 2026 at 09:00 AM PKT

Key takeaways

iCloud Keychain syncs passkeys across Apple devices on the same Apple ID. Google Password Manager does the same across Android and Chrome.
Passkeys do not sync directly from iPhone to Android. Sign-in on the other platform uses a QR hybrid flow or a third-party manager.
FIDO's Credential Exchange Format now lets apps like Apple Passwords and Bitwarden move passkeys between managers without plaintext exports.

The Touch ID fingerprint sensor on a MacBook Air, the kind of biometric check passkeys use instead of passwords — The Touch ID sensor on a MacBook Air; passkeys replace passwords with this kind of biometric checkPhotograph: NiloGlock/Wikimedia CommonsImage: Wikimedia Commons

What is passkey sync?

A passkey is a login credential made of a cryptographic key pair. The private key stays on your device. The public key goes to the website or app.

When you sign in, your phone proves it holds the private key with your fingerprint or face. There is nothing to type, phish, or leak in a breach.

Sync is what stops a passkey from being trapped on one phone. Most passkeys created on a phone or laptop today are the synced kind. They live in a credential manager, which copies them to your other devices through the cloud. The FIDO Alliance, the industry body behind the passkey standards, counts 5 billion passkeys in active use as of May 2026. 75 percent of users have enabled at least one, according to reporting by Wordfence.

This article explains how passkey sync works on iPhone and Android. It covers what syncs automatically on each platform, how to move passkeys between the two ecosystems, and the bottom line on keeping access to your accounts.

How passkeys sync on iPhone

On an iPhone, passkeys are stored in iCloud Keychain. That is the same system that holds your saved passwords. Once you create a passkey in Safari or an app, it syncs to every Apple device signed in to the same Apple ID. Your iPad, your Mac, any other iPhone. The sync is automatic and silent.

The sync is end-to-end encrypted. Apple runs the cloud that carries the encrypted data, but it cannot read your passkeys. Recovery works through your trusted devices, an account recovery contact, or a recovery key. A single lost iPhone does not lock you out of every account.

One habit saves trouble later. Name a passkey by the manager that holds it, such as "iCloud Keychain," rather than by the device where you created it. The passkey roams to all your Apple devices. A device name becomes wrong within days.

How passkeys sync on Android

On Android, passkeys live in Google Password Manager. They sync across every Android device signed in to the same Google account. Through Chrome they reach Windows, macOS, Linux, and ChromeOS desktops as well. Google's desktop passkey sync has been in place since late 2024, according to Wordfence.

Google encrypts synced passkeys with a key derived from your device's screen lock. The recovery path runs through your Google account's own recovery flow.

If you lose every signed-in device, you need a recovery code or a recovery phone number to get back in. Set both up before you need them.

The boundary is the same as Apple's, just mirrored. Google-synced passkeys do not appear in Safari or Firefox directly. Each ecosystem syncs within itself.

Can you move passkeys between iPhone and Android?

This is the question everyone actually means. There is no direct sync pipe from iCloud Keychain to Google Password Manager. Your iPhone passkeys stay inside Apple's world. Your Android passkeys stay inside Google's, until you move them.

For day-to-day sign-in, you do not need to move anything. The FIDO standards include a "hybrid" flow. The site shows a QR code on one device. You scan it with your phone. Your phone approves the sign-in over Bluetooth.

An Android phone can borrow an iPhone-stored passkey for a single login ceremony. The credential never copies over. It is clumsy for daily use, but it works.

For a real move, two paths now exist. The first is the FIDO Alliance's Credential Exchange Format (CXF) and Credential Exchange Protocol (CXP). They were drafted in late 2024 and now ship in products.

Apple Passwords in iOS 26 can export passkeys to compatible apps through it. Bitwarden is among the first to accept transfers, according to MakeUseOf. On Android 14 and newer, Google supports the same protocol through Google Play Services 26.21 and up. There the flow is reversed, and the target app initiates an import request, per MakeUseOf and TalkAndroid.

The second path is a third-party password manager. Apps like 1Password, Bitwarden, and Dashlane store passkeys in their own vaults. They sync them through their own clouds across iOS, Android, Windows, macOS, and browsers.

Create the passkey inside one of these apps, and the platform question disappears. That portability is the reason many security guides now suggest picking a manager instead of defaulting to the built-in one.

A Blackview A60 Android smartphone in a folio case — An Android smartphone, where passkeys sync through Google Password Manager across devices and ChromePhotograph: Acabashi/Wikimedia CommonsImage: Wikimedia Commons

One caution: Microsoft's password manager had no passkey export path at all as of mid-2026, per the same support-matrix reporting. Where you first create a passkey still matters. Check the exit options before you commit.

If you are switching phones for good, follow the safest sequence. Sign in on the new phone with the old one nearby. Confirm the passkeys arrived. Only then wipe the old device. For background on the basics, see what a passkey is in plain English. For the lost-phone scenario read what happens to passkeys if you lose your phone.

Frequently asked questions

Do passkeys sync automatically between iPhone and Android?

No. iCloud Keychain syncs within Apple devices. Google Password Manager syncs within Google's ecosystem. Cross-platform moves need the FIDO credential exchange format, a manual export, or a third-party manager like Bitwarden or 1Password.

Is one ecosystem's sync safer than the other?

Both use end-to-end encryption. Apple's recovery runs through trusted devices or a recovery key. Google's runs through the account recovery flow with a code or recovery phone. Neither company can read your passkeys, according to both vendors' documentation.

What is the QR hybrid flow?

It lets your phone act as an authenticator for another device. The other device shows a QR code. Your phone scans it. It approves the sign-in over Bluetooth. The passkey itself never leaves your phone.

Can I use an iPhone passkey on a Windows PC?

Yes, through the same hybrid flow. Scan the QR code shown on the PC with your iPhone. Approve with Face ID. You are signed in. For permanent access, import the passkey into a cross-platform manager instead.

The bottom line

Passkeys sync beautifully inside each ecosystem and not at all across them, at least not automatically. Apple syncs to Apple, Google syncs to Google and Chrome. The bridge between them is either a QR-code sign-in for the moment or the FIDO credential exchange format for the long term. Pick one credential manager you trust, learn its recovery steps, and you will never be stranded by a platform switch.

---

Rive News is the research desk behind this publication's explainers. It covers how consumer technology works, with every claim traced to a named public source.

Latest in tech

Subscribe for one practical tech explainer like this every morning.

Standards: every statistic above carries in-text attribution; corrections are published with an update timestamp. All images are freely licensed; see the asset manifest for credits.

TaggedpasskeysiCloud KeychainGoogle Password ManagerFIDO Alliancecredential exchange