ANYONE with an iPhone or Android is being urged to try a clever new feature called passkeys.
A passkey is designed to be a replacement for your password.
The benefit is that a passkey should be easier to use while offering far greater protection.
Passwords are widely considered to be a very poor way for you to seal your accounts.
And cyber-experts say that it's extremely risky to be using passwords alone to protect one service in particular.
Pub delivers five-word response to critics of its 'slow' carvery service
"Your email is a goldmine for cybercriminals because of the extensive amount of information an attacker can gain from it," said Aranza Trevino, of Keeper Security.
"Making it important to protect your email from unauthorized access."
Aranza continued: "If a scammer were to gain access to your email, they could easily use the 'Forgot Password?' option to send a password reset email, enabling them to change your passwords and gain access to your other accounts.
"Just like that, they’ll be able to compromise almost any of your online accounts."
The security expert recommended switching to passkeys instead.
Passkeys let you log in with a scanner on your phone, like Face ID facial recognition or a fingerprint sensor.
They can't be hacked, leaked, forgotten, or accidentally given away.
Apple and Google have both been hard at work to offer them on their devices.
And they're very easy to set up once you know how.
"To prevent scammers from accessing your email, you should use a passkey to log in (if available), enable MFA and have an email recovery option set up," Aranza revealed.
Millions of Android owners could slash 'vampire bills' – how to save money
She went on: "A passkey is a passwordless authentication method that allows you to sign in to your account without having to enter a password.
"Passkeys leverage biometric information, such as fingerprint or facial recognition, to confirm your identity.
"Passkeys are more secure than passwords because they are phishing-resistant, error-proof and support Two-Factor Authentication (2FA) by design.
"Therefore, they should be used as a sign-in method for every account they’re supported on."
Not all apps offer support for passkeys yet, but the number of services that let you use them is growing rapidly.
And popular email apps like Google's Gmail and Microsoft's Outlook already offer passkey support.
HOW TO SET UP PASSKEYS ON IPHONE
It's extremely simple.
First go to set up a new account – or sign in to an existing one – on a website or app that supports passkeys.
If you're using an existing account then you might need to go into your account settings.
You should see an option to save a passkey for the account.
Hit Continue and then follow the instructions to save your passkey – which will be stored in Settings > Passwords on your iPhone.
Then you can simply log in with the passkey next time using Face ID or Touch ID – or with your device passcode if that fails.
If you're signing in on another device then you'll need to use your iPhone camera to scan the website's QR code and log in that way.
HOW TO SET UP PASSKEYS ON ANDROID
It's a similar process for Google's passkeys on Android.
Just go to sign up or log in to a website or app and look for the option to create a passkey.
Make one and then it'll be saved to your Google Password Manager.
This will make your passkey available across all Android apps.
You can find your passkeys by going into your device settings and choosing Passwords.
And like on iPhone, you can scan a QR code with your Android phone camera to sign in with a passkey on another device – like a laptop.
Google adds the following tip: "After you scan the QR code on an Android device, you can choose to remember your computer.
"If you do, the computer shows your Android device as an option when you need a passkey.
"When you select it, you receive a notification on your device to verify your identity."
