A passkey is a sign-in credential based on public-key cryptography. FIDO describes passkeys as a password replacement designed to resist phishing. Depending on the implementation, a passkey can be synchronised between devices or bound to a particular device. Source: FIDO Alliance: passkeys

Check how staff will use it

For a travel team, start with a supported service and a small, agreed trial. Record the devices staff use, how they unlock the credential and what happens when a device is replaced. This connects the choice of sign-in method with the everyday work it needs to support.

A passkey does not answer every access question. Decide separately which actions the person should be allowed to perform after signing in, such as viewing bookings or changing payment settings.

Include recovery in the trial

Ask the provider for its current recovery instructions and test the approved route. Avoid assuming that a personal phone or personal cloud account is an acceptable recovery dependency for a business account.

Record the result and account owner. That gives another authorised colleague a clear starting point when a staff member changes role or leaves.

Written and updated by Travelgenix. Sources checked on 16 October 2026. Worked examples and checklists are editorial illustrations and recommendations, not customer results.