Credentials are the information used to sign in, verify identity, or prove a qualification. On phones and computers, credentials specifically mean passwords, passkeys, verification codes, and Wi‑Fi passwords stored in apps like Apple Passwords.
What are credentials?
Credentials are the proof or information you use to sign into an account, verify who you are, or demonstrate a qualification. On a mobile device or computer, that typically means the passwords, passkeys, and verification codes you enter to access apps and websites. Apple’s Passwords app stores passwords, passkeys, Wi‑Fi passwords, and verification codes in one place. Apple also says passkeys replace passwords for supported websites and apps, and are stored in iCloud Keychain.
Google’s Android documentation uses “digital credentials” for verifiable credentials that are cryptographically validated by an issuer, and its Credential Manager supports passkeys, passwords, and federated sign-in such as Sign in with Google. Microsoft documents “app passwords” as long, randomly generated passwords used once instead of a regular password for apps or devices that do not support two-step verification.
Key takeaways
- Apple says passkeys require iCloud Keychain and two-factor authentication to be turned on.
- On iPhone, the Passwords app is available starting in iOS 18.
- In iOS 17 or earlier, saved passwords are found in Settings > Passwords.
- Android’s Credential Manager supports passkeys, passwords, and federated sign-in.
- Microsoft app passwords are created in the account’s advanced security options and then entered in the app or device instead of the normal password.
Credentials on iPhone and Apple devices
On iPhone with iOS 18, saved credentials are managed in the Passwords app. The path is: Passwords app > unlock with Face ID, Touch ID, or passcode > choose a category or Shared Group > select the website or app. To update a saved password, tap Edit, then Change Password; to delete, tap Edit, then Delete. In iOS 17 or earlier, the path is Settings > Passwords, then authenticate with Face ID, Touch ID, or passcode. Apple says if you are not on the latest version, you can still view, update, or delete saved passwords and passkeys there.
Apple says passkeys are encrypted and stored in iCloud Keychain, and they are not visible to anyone, including Apple. Apple also says passkeys work only on supported websites and apps. To use passkeys, Apple says to go to the sign-in screen for a supported website or app, tap Continue when prompted to save a passkey, and later manage them in the Passwords app. You can delete a passkey in the Passwords app by opening it, selecting Passkeys, then tapping the account and deleting it.
For users who need help changing names and labels on mobile, the Passwords app allows you to update the account name or label associated with a saved credential by selecting the entry and tapping Edit.
Credentials on Android and Google accounts
On Android, the documented term is digital credentials, meaning verifiable credentials cryptographically validated by an issuer. Google’s Credential Manager is the Android library that supports passkeys, passwords, and federated sign-in solutions such as Sign in with Google. This means Android devices can store and use multiple sign-in methods in one place, including passkeys and traditional passwords, and can use federated identity providers like Google to sign into apps without creating a separate password.
Credentials on Microsoft accounts
Microsoft app passwords are long, randomly generated passwords used once instead of a regular password. Microsoft’s app password flow applies when an app or device does not support modern authentication or two-step verification. To create one, go to the account’s advanced security options, scroll to App passwords, create a password, and then enter it where the normal Microsoft account password would go in the app. Microsoft also gives a phone example for the standard Mail app on Android: Menu > Settings > your Microsoft account > under Server settings, Incoming settings > get a new app password > replace the phone password with the app password > Done.
Why are credentials important?
Credentials are essential for account access and sign-in security. Apple says passkeys replace passwords for supported sign-ins, which makes credentials important for account access and sign-in security. Google says Credential Manager supports modern sign-in methods like passkeys and federated sign-in, reducing reliance on vulnerable passwords. Two-factor authentication adds protection, and managing credentials properly prevents unauthorized access. Without proper credential management, accounts are at risk of being compromised.
Frequently Asked Questions
Can I share credentials with family members?
Apple’s Passwords app supports Shared Groups in iOS 18, allowing you to share passwords and passkeys with trusted contacts. Android’s Credential Manager does not natively support sharing, but Google Password Manager allows sharing with family groups.
What happens to my credentials if I lose my phone?
If you use iCloud Keychain or Google’s Credential Manager, your credentials are backed up and can be restored on a new device after signing in with your Apple ID or Google account. Microsoft credentials are tied to your Microsoft account and can be recovered online.
Are passkeys more secure than passwords?
Yes. Passkeys are cryptographically generated and stored on your device, making them resistant to phishing and data breaches. They cannot be guessed or reused across sites, unlike passwords.
How do I export my saved passwords?
On iPhone, you can export passwords from the Passwords app by tapping the three-dot menu and selecting Export Passwords. On Android, Google Password Manager allows export through your Google Account settings. Microsoft account passwords can be exported from the Microsoft account security dashboard.
Do credentials expire?
Passwords and app passwords do not automatically expire unless the service enforces a password rotation policy. Passkeys remain valid until you delete them or revoke the device’s access.
