A passkey lets you open Instagram with the same fingerprint, face or screen lock that unlocks your phone, with no password to type. Meta brought passkeys to Instagram with its Meta Account on 23 April 2026; they already covered Facebook and Messenger. You'll find the option in the app's settings under Meta account settings, Login and security, Passkey, and one Meta account can hold five. For people Meta places in Advanced Protection, such as Meta Verified subscribers, ad managers and large accounts, a passkey is mandatory: without one the account stays locked. The rollout is gradual, so the option may not have reached you yet.
What changes when you use one
With a password, anyone who learns it can sign in as you. A passkey is different: the secret never leaves your device, and you prove it's you by unlocking that device. Meta's own description is that passkeys cannot be stolen, passed on, guessed or used twice, and that a fingerprint or face scan is checked on the phone itself without being sent to Meta.
For Instagram owners, the biggest benefit is against phishing. A lookalike login page has nothing to collect when there's no password to type.
The feature is recent. Meta announced on 23 April 2026 that, as part of the new Meta Account, passkeys now cover Instagram too. The switch away from Accounts Center is planned over about a year, and Meta warns that not everyone sees passkeys yet.
Creating your passkey
Meta sometimes offers one at sign-in. Otherwise:
- In the Instagram app, open settings.
- Go to Meta account settings, then Login and security.
- Open Passkey and choose Create passkey.
- Unlock as you normally would, with face, fingerprint or screen lock.
Meta advises against creating a passkey on a public or shared device. If your phone fills in passwords for you, Meta may convert that saved login into a passkey automatically; signing in feels the same. Your device's password settings have a switch, Allow automatic passkey upgrades, if you'd rather it didn't.
Using it to sign in
- When the login screen shows Use passkey, tap it, or pick the passkey from auto-fill, and unlock as you would your phone.
- On a borrowed computer, a QR code may appear. Scanning it with your phone signs you in there without storing anything on that computer, as long as Bluetooth is on for both.
- Synced passkeys travel with your cloud account (iCloud Keychain, Google Password Manager) to your other devices; device-bound ones live only on the device that made them.
Will your device work?
| Device | Minimum Meta lists |
|---|---|
| iPhone | iOS 16 on an iPhone 8 or newer, with iCloud and two-factor authentication enabled |
| Android | Version 9 or newer, with a screen lock set |
| Desktop | Windows 10+ or macOS Ventura+ |
| Browser | Chrome or Edge 109+, Safari 16+ |
| Limit | Five passkeys on one Meta account |
When the option won't appear or setup fails, Meta suggests: update the app, set a screen lock, enable iCloud Keychain on Apple devices, switch Bluetooth on if a phone is signing you in on a computer, and avoid private or Incognito windows.
Accounts that must have one
Advanced Protection is Meta's stronger setting for accounts that attract phishing. A passkey is compulsory there, and Meta says enrolment covers, among others:
- people who use advertising or business tools;
- owners of Pages or profiles with big audiences or wide reach;
- admins and members of an advertiser's Business Portfolio;
- creators and businesses with Meta Verified;
- public figures in civic life, for example journalists and politicians.
If such an account has no passkey, Meta locks it until one is created, and removing its last passkey has the same effect.
Seeing, removing and backing up passkeys
The Passkey screen lists each one with the email or phone number it's tied to, where it's stored and its creation date. Remove next to an entry deletes it for good; Meta may ask for your password or a one-time code first, and you may need to delete it from your phone or password manager as well. Unless your account requires a passkey, you then sign in the old way.
That's why the older methods still matter. Keep the password, your two-factor method and your backup codes up to date: if the phone with a device-bound passkey is lost, they're what let you back in.
One exception to remember: WhatsApp keeps its own passkeys. Meta says they don't work for Instagram, and Instagram's don't work for WhatsApp.
Common questions
Can I use a passkey on Instagram?
Yes, through the Meta Account that Meta introduced on 23 April 2026. It's rolling out gradually, so whether you see it depends on your app, device and browser.
Where is the passkey setting?
In the app's settings: Meta account settings, then Login and security, then Passkey.
Why can't I skip the passkey prompt?
Your account is probably in Advanced Protection, for instance because of Meta Verified or ad access. For those accounts Meta requires a passkey and keeps the account locked until there is one.
Does my WhatsApp passkey work for Instagram?
No; Meta keeps WhatsApp passkeys separate in both directions.
How many passkeys can I create?
Five per Meta account.
Locked out after a passkey prompt?
Tell us what Instagram asked for and what the screen shows now. A free first look points you to the official route. Your password and codes stay with you.
Sources
- About Meta passkeys (Meta Help Center) meta.com
- Meta Account: The Simpler Way to Access Your Apps and Devices (Meta Newsroom, 23 April 2026) about.fb.com
- Securing your Meta Account with two-factor authentication (Instagram Help Center) help.instagram.com
- How you can use a backup code on Instagram (Instagram Help Center) help.instagram.com
- About Meta Verified for creators (Instagram Help Center) help.instagram.com