Turn your Android phone into a security key to log in to services from a Windows PC It's a fast and very robust way to protect your accounts against phishing and password theft. The idea is simple: your phone becomes the "turnkey" that confirms it's you when you enter your credentials on your device.
In practice, this translates into two complementary scenarios: Use your phone as a built-in security key to protect your Google Account when signing in to Windows using Bluetooth, and take advantage of passkeys and Windows Hello for compatible services, including your Microsoft account for personal or professional use. I'll tell you how it works, what you need, and how to set it up step by step, with all the Tricks and problem solving.
What it means to use your Android as a security key
A security key validates that you are physically near the device you are trying to log in from.In the case of the phone's built-in key, Google checks Bluetooth signals between your Windows PC and your Android to confirm proximity before granting access. This check prevents someone else, somewhere else, from impersonating you using just your password.
The magic is in open standards like FIDO2 and WebAuthn, which allow authentication without exposing reusable secrets. Unlike codes sent by SMS or email, here device possession and local verification (fingerprint, face or mobile PIN) make the difference.
Plus, your biometric data never leaves the device.: The fingerprint or face verification is done locally, and the browser/service only receives cryptographic proof that you unlocked your phone.
Requirements and compatibilities
To use your Android as a Google built-in security key You need to meet a few basic requirements: a phone running Android 7.0 or higher and a Windows PC with Bluetooth and a modern browser. Google will automatically attempt to activate the built-in dongle if your phone is compatible.
Please note an important limitation of the built-in Google Key.You can only have one integrated security key per account. If you have multiple compatible phones, you'll need to choose one, though you can change it later from your security settings.
About passkeys on Google and other services:
- Systems: Windows 10, macOS Ventura, and ChromeOS 109 or later; iOS 16 and Android 9 or later.
- Browsers: Chrome 109+, Safari 16+, Edge 109+, Firefox 122+.
- Requirements: Screen lock enabled; Bluetooth enabled when using your phone as a key to log in to another device.
- Hardware Optional: FIDO2 USB/NFC compatible keys.
For work accounts (Google Workspace) Your organization may restrict logins using passcodes only. In that case, you may only use them as a second factor, to recover your account, or to confirm sensitive actions. Check the "Bypass password when possible" setting in your account or consult with your administrator.
Set up your Android as a security key for your Google account
First of all, activate two-step verification (2SV) on GoogleIf you're already using it, you can skip this step. The built-in key acts as a second verification step and doubles your protection when you're using new devices.
Steps to add the phone as an integrated key:
- On your Android, go to myaccount.google.com/security.
- Under “How you sign in to Google,” tap “Access keys and security keys.”
- Choose “Add Security Key”.
- Select your Android phone and confirm with “Add”.
When finished, you'll see a message indicating that your phone has been added as a security key.
CouncilIf your phone meets the requirements, Google may suggest automatically using its built-in key for new logins. However, you can always manage it manually from the same security page.
Log in to a Windows PC using your mobile phone as a key
To use the built-in key on a “new” Windows for your accountMake sure Bluetooth is turned on on both your PC and phone. Then, try signing in to your Google account on your Windows computer.
You will receive a notification on your mobile phone: “Are you trying to log in?”. Double-tap it and follow the prompts to confirm your identity. This step verifies that you're near the device and that it's really you entering.
If you use access keys (passkeys) created on your mobile You can also use them to sign in to your Google account on your PC:
- On your computer, type your username and choose “Try another way.”
- Click “Use your access key” and wait for the QR code to appear.
- Scan it with your phone's camera (on iOS, Camera app; on Pixel, built-in scanner; on other Androids, Google Lens if the camera doesn't detect it).
- Tap “Use Passkey” on your phone and unlock it with a fingerprint, face, or PIN.
The next time you use the same PC and phone combination, you'll receive a direct prompt to complete verification.
Problem with Windows 10 saying Bluetooth is not turned on? If you see “Turn on Bluetooth to allow pairing” even though you have it turned on, go to Windows 10 Settings > Privacy > Radio signals and turn on “Let apps control your device’s radio signals.”
Troubleshooting common problems
- Bring the devices closer togetherThe built-in key requires proximity. Place your Android next to the PC you're trying to access and try again.
- Check Bluetooth on both sidesEnable it on your mobile device and Windows. If you've had previous issues, disable it and re-enable it on both to reconnect.
- Turn on location services on AndroidSome Bluetooth features on Android are location-dependent. Turn it on to complete the verification, and if you'd like, turn it off when finished.
- Check device requirementsTo log in on a computer using your phone's built-in key, make sure you're using an updated Windows device with Bluetooth and a compatible browser. If you're logging in from an iPhone/iPad or ChromeOS, check the key compatibility and system version.
- Do you see requests that you haven't started? Decline them immediately. Then, review your signed-in devices at google.com/devices and change your password if you suspect unauthorized access.
- Log in if you can't use the keyOn the confirmation screen, tap “Cancel” and then “Try another way” to use an alternative verification method (codes, app, etc.).
- “Access key is missing” or does not appear as an option. Make sure the device with the passkey has a screen lock enabled and that the "Skip passcode when possible" setting is enabled at myaccount.google.com/security. If you're in a hurry, use "Try another way."
Manage access keys and security keys in your account
Check and manage your passwords from myaccount.google.com/signinoptions/passkeys. You may need to verify your identity; if you manage multiple accounts, confirm you're managing the correct one.
Delete passkeys: In the list, select the passkey and tap "Remove." If you removed a passkey from your account but it's still being requested, check if it's also saved in a third-party credential manager and delete it there.
Automatically created passkeys on AndroidTo remove an automatically generated key from your phone, remove that device from your account at google.com/devices. This will invalidate its use as a key with your profile.
More security: Advanced Protection Program and best practices
If you are exposed to targeted attacks (IT administrators, managers, journalists, or campaign staff), consider signing up for Google's Advanced Protection Program. It offers the highest level of security for Google accounts at no cost.
Extra recommendationEven if you use your Android as a key, add a backup FIDO2 hardware security key. It'll save you money if you lose your phone or it runs out of battery and you need to get in quickly.
Microsoft and Windows Access Keys: What You Can Do with Your Android
Passkeys are also available for Microsoft accounts. personal, work, or school logins. You can authenticate with a face, fingerprint, PIN, or a compatible security key, and Windows Hello integrates this experience into Windows 10/11. Knowing these methods will allow you to better manage your security..
Create a password for your work or school account It’s easy to sign up from the security information page: go to mysignins.microsoft.com/security-info, choose “Add sign-in method,” select “Passkey” or “Passkey in Microsoft Authenticator,” then follow the instructions on your device.
Use a passkey to sign in to Microsoft: Each time you receive the login screen, go to “Login Options” and choose Face, Fingerprint, PIN, or Security Key. Select the available passkey and complete verification in the system security window.
Remove a Microsoft passkey It involves two steps: deleting it at mysignins.microsoft.com/security-info and removing it on the device itself if you also registered it locally.
Integrated security keys, passkeys, and “Mobile Link”: don’t confuse concepts
Google's built-in key and passkeys are used for authentication. without a password or as a strong second factor. On the other hand, “Mobile Link” (Link to Windows) is something else: it allows you to connect your Android to your PC to view notifications, reply to messages, make calls, use apps, manage photos, etc.
Basic Requirements for Mobile Link on Android: Windows 10 (May 2019 Update or later) or Windows 11, Android 8.0+ (Android 10+ recommended for best performance), and both on the same Wi-Fi network. The “Link to Windows” app is usually included on many devices (Samsung, HONOR, OPPO, ASUS, vivo) or can be installed from Google Play or the Galaxy Store.
How to link from the PC: Open the Mobile Link app on Windows, sign in with your Microsoft account, install/open “Mobile Link” on your phone, select “I have the app ready,” and select “Pair with QR code.” Scan the QR code from your phone and grant the requested permissions to sync content.
Features you can enable/disable In Mobile Link: Notifications, messages, calls, photos, audio player, instant Wi-Fi hotspot, copy/paste between devices (if supported), sync over mobile data, wallpaper sharing, and more. All configurable in Settings > Features.
Permits and particularitiesAndroid 13 introduced runtime notification permission, which is required for apps to receive notifications from your phone. On some Samsung devices, “All File Access” controls whether Link to Windows can manage photos/files on your PC. Android 15, the “Do Not Disturb” mode has changed and may require manual adjustments for the app to control it from your device.
iPhone and Windows via Mobile Link: This is also possible, although with specific requirements (e.g., Bluetooth Low Energy on the PC and iOS 15+), and with analogous pairing steps via QR code and permissions for messages, notifications, and contacts.
Advantages of access keys over passwords
Passkeys minimize the risk of phishing. Because you can't "tell" your key: it only exists on your devices and is validated cryptographically. There's nothing to write down, and no reusable secret an attacker can steal with a fake email.
When you use a passkeyYou prove that you have your device and can unlock it. If your account has 2SV or you're on Advanced Protection, using a passkey often skips the second step, as the passkey itself proves possession and unlocking.
Create access keys in Google: options and notes
Create a passkey on the device you are using It's as simple as going to myaccount.google.com/signinoptions/passkeys and tapping "Create Passkey" > "Continue." You'll be prompted to unlock your device, and it'll be ready for future logins.
Create a passkey on a key USB External FIDO2 is also supported: go to the same page, choose “Create access key” > “Use another device” and insert the hardware key to complete the registration (PIN or fingerprint sensor on the key itself, depending on the model).
Useful Notes on Google:
– After your first passkey, supported devices will suggest creating a local passkey the next time you log in.
– Avoid registering passkeys on shared devices.
– If you added the FIDO2 key before May 2023, you may need to remove it from the account and add it again as a passkey.
Use, view, and disable “Skip password when possible”
By default, Google prioritizes the password. when it exists, so you can log in without a password in supported environments. If you prefer to enter your password first, open your Google Account > "Security & sign-in" and turn off "Skip password when possible."
If you disable itYou'll see your password as the initial step; if you have 2SV, you can use any password as the second factor. It's completely reversible: reactivate the preference whenever you want to enjoy the password-free experience.
Passionate writer about the world of bytes and technology in general. I love sharing my knowledge through writing, and that's what I'll do on this blog, show you all the most interesting things about gadgets, software, hardware, tech trends, and more. My goal is to help you navigate the digital world in a simple and entertaining way.