Microsoft launches passkey support for all consumer accounts

Image: Microsoft

What are passkeys?

Passkeys can replace traditional passwords with your device's own authentication methods. That way, you can sign in to Gmail, PayPal, or iCloud just by activating Face ID on your iPhone, your Android phone's fingerprint sensor, or with Windows Hello on a PC. 

Built on WebAuthn (or Web Authentication) tech, two different keys are generated when you create a passkey: one stored by the website or service where your account is and a private key stored on the device you use to verify your identity.

Of course, if passkeys are stored on your device, what happens if it gets broken or lost? Since passkeys work across multiple devices, you may have a backup available. Many services that support passkeys will also reauthenticate to your phone number or email address or to a hardware security key, if you have one.

Apple's and Google's password vaults already support passkeys, and so do password managers like 1Password and Dashlane. 1Password has also created an online directory listing services that allow users to sign in using a passkey.

"Today, you can use a passkey to sign in to Microsoft apps and websites, including Microsoft 365 and Copilot on desktop and mobile browsers," explains Vasu Jakkal, corporate vice president of Microsoft security, compliance, and identity. "Support for signing into mobile versions of Microsoft applications using your passkey will follow in the coming weeks."

Passkeys represent a big milestone in Microsoft's efforts to push toward a passwordless future. Microsoft first introduced Windows Hello authentication with Windows 10 in 2015, allowing you to sign in to a PC with your face, fingerprint, or via a PIN. Microsoft then started supporting FIDO security keys in April 2018 before adding a fully passwordless option for Microsoft accounts in 2021.

Passkeys have now become the industry norm, adopted by Apple, Google, Microsoft, and others. Over 400 million Google accounts have used passkeys so far, demonstrating that they're a popular alternative to having to use a password to sign in everywhere.