Microsoft Entra passkey support for Windows devices introduced

Microsoft is rolling out passkey support for Microsoft Entra on Windows devices, introducing phishing-resistant, passwordless authentication through Windows Hello. This opt-in feature will begin its public preview in mid-March 2026, with government cloud environments to follow shortly after, based on information published by Bleeping Computer.

The new feature allows users to create device-bound passkeys stored within the Windows Hello container, which can then be authenticated using face, fingerprint, or PIN. Notably, this extends passwordless sign-in to unmanaged Windows devices, addressing a previous gap where personal and shared devices relied on password-based authentication.

These generated passkeys are cryptographically bound to the device and are not transmitted over the network, making them resistant to phishing and malware attacks. While each Entra account registers its own passkey per device, and multiple accounts can coexist on one machine, passkeys are not synced across devices, requiring separate registration for each.

Source: Bleeping Computer