On June 5, 2023, Google began rolling out an open beta that let Workspace administrators allow users to sign in with passkeys instead of entering a password. The launch announcement described a gradual rollout and an administrator-controlled option. This was a milestone in workplace authentication, not an automatic switch for every organization.
Reduce the role of passwords in everyday work
Passkeys use public-key cryptography to provide phishing-resistant authentication. A person typically unlocks the credential through a supported device or security key. A fingerprint or face scan used for this purpose stays on the device; it is not sent to Google. The practical benefit is a sign-in method that does not ask staff to type a reusable password into a website.
That benefit depends on the surrounding controls. Device access, account recovery and the way credentials are stored still matter. A passkey does not make a compromised computer safe or remove the need to manage an employee’s access when their role changes.
Start with a manageable pilot
Before changing a team’s habits, define which accounts and devices are in scope. Google’s administrator guidance explains the controls for allowing passwordless sign-in. Use the current documentation when planning a deployment, since management options and requirements can evolve.
- Confirm supported devices, browsers and the organization’s authentication rules.
- Decide how approved credentials will be managed when a device is replaced or lost.
- Test normal sign-in and an authorized recovery scenario with a small group.
- Give staff clear instructions for recognizing the expected sign-in process and requesting help.
Google’s user guidance warns against creating a passkey on a shared device. Anyone who can unlock that device may be able to access the account. Keeping this boundary clear is particularly important for shared workstations and reception computers.
Measure readiness before expanding
Review pilot feedback, confirm that essential work remains accessible and check that support staff can handle a lost-device situation. The aim is to improve account protection while giving employees a dependable way to work, rather than making recovery an afterthought.
Nuagerie’s IT management services cover devices, productivity-suite administration and user support. Describe your account-security project with the device types, shared-workstation constraints and recovery responsibilities involved. We can help identify the preparation and support needed for a controlled adoption.
