Access keys are used as a security measure to ensure that the person viewing personal information through sites cannot view another user's data by changing the Salesforce Id. Access keys are stored on the contact record, and when restrictions are enabled, access keys are required to view personal information.