What is a Google passkey?

A passkey is a way to sign in to your Google account with your fingerprint, a face scan or your screen lock, instead of a password. It's stored on your phone, your computer or a security key. Google never sees your fingerprint or face, and your password keeps working.

Why Google may ask for one

Since August 2026, Google can ask for a passkey when you give an app access to Google Ads, and it's rolling this out to everyone. So when you click Connect on the Google Ads card in Bavian, Google may ask you, in its own window, to confirm with a passkey or to create one.

Google also needs 2-Step Verification on that Google login. If it isn't turned on, Google may ask you to add it in the same window.

It's about the Google login you choose in Google's window, not your Bavian login. The rule doesn't affect a connection that already works: you only meet it the next time you go through Google's window.

How to create a passkey

1. Go to g.co/passkeys and click Create a passkey.
2. If Google asks, sign in with the Google login you use for Google Ads.
3. On the page that opens, click Create a passkey and follow the steps.
4. Unlock your device with your fingerprint, face or screen lock when it asks.

It works on a computer with Windows 10, macOS Ventura or ChromeOS 109 or newer, or a phone with Android 9 or iOS 16 or newer, with the screen lock turned on and an up-to-date browser. A security key works too if it supports FIDO2, which most do.

Create it before you connect, because Google can take up to 7 days to accept a new passkey.

If it doesn't work

• Your new passkey isn't accepted yet: wait and try again later, or use an older passkey, for example one on your phone, which Google lets you use from your computer by scanning a QR code.
• You're signed in to several Google accounts: create the passkey on the one that has access to your Google Ads account.
• You're in a private or incognito window: it can block the passkey, so use a normal window.
• You use a work account (Google Workspace): you can usually create a passkey there too. If your admin only allows security keys, use one. If your admin doesn't let you turn on 2-Step Verification, ask them to.
• You can't wait: a colleague on your Bavian team who has a working passkey and Standard or Admin access to the Google Ads account can connect it instead. Bavian then works through their Google login, so keep their access to the Google Ads account. If they're not on your team yet, the owner can invite them under Team on the Account page.