Do Passkeys Sync Across Devices in macOS 13?

Yes, passkeys are automatically synchronized across your devices using iCloud Keychain starting with macOS 13 Ventura and iOS 16. When you create a passkey on a Mac running macOS 13, it seamlessly syncs to your other Apple devices signed into the same Apple ID, allowing you to sign in to websites and applications without manually transferring credentials or re-registering.

How Synchronization Works

Passkeys are built on the FIDO Alliance and W3C standards, utilizing public-key cryptography. Instead of a traditional password, your Mac creates a cryptographic key pair: a public key stored by the website or app, and a private key stored locally on your device.

In macOS 13, this private key is integrated directly into iCloud Keychain. Whenever a new passkey is saved in Safari or a supported app, iCloud Keychain securely syncs it across all your Apple hardware running compatible operating systems, including iOS 16, iPadOS 16, and watchOS 9 or later.

System Requirements for Syncing

To ensure your passkeys synchronize properly across devices, the following settings must be active:

  • Operating System: macOS 13 (Ventura) or newer on your Mac, and iOS 16 or iPadOS 16 or newer on mobile devices.
  • Apple ID: All devices must be logged into the same Apple ID.
  • Two-Factor Authentication: Apple ID two-factor authentication must be enabled.
  • iCloud Keychain: The feature must be enabled in System Settings > [Your Name] > iCloud > Passwords & Keychain.

Security and Encryption

The synchronization process relies on end-to-end encryption. Even Apple cannot read the private keys associated with your passkeys. They are shielded by hardware security modules (such as the Secure Enclave on Apple silicon or T2 security chips) and can only be decrypted on trusted devices authenticated by your Mac's password or Touch ID.

Using Passkeys on Non-Apple Devices

While native iCloud Keychain synchronization only extends to Apple hardware, passkeys created in macOS 13 can still be used on non-Apple devices, such as Windows PCs, Android phones, or Chromebooks. When signing in on an unsupported platform, the browser can generate a QR code. Scanning this code with an iPhone or iPad linked to your iCloud Keychain verifies your identity securely via Bluetooth proximity, allowing you to authenticate without sharing your raw credentials across platforms.