cyber.hendryadrian.com
Security News · bleepingcomputer.com

Microsoft Entra Adds Windows Hello Passkeys for Phishing-Resistant Sign-In

· Original article ↗

Summary

Microsoft Entra's opt-in public preview adds device-bound Windows Hello passkeys for phishing-resistant, passwordless sign-in on managed and unmanaged Windows devices. Admins must enable FIDO2 passkeys and configure a Windows Hello passkey profile.

Key points

  • The preview adds phishing-resistant, passwordless Entra sign-in through device-bound passkeys stored in the Windows Hello container.
  • Passkeys can authenticate using Windows Hello face recognition, fingerprint, or PIN.
  • The feature also supports unmanaged Windows devices, including personal and shared machines.
  • Passkeys are not synced across devices; each Entra account must register separately on each device.
  • Enrollment requires admins to enable Passkeys (FIDO2), create a profile with the required Windows Hello AAGUIDs, and assign it to groups.
  • The article gives rollout windows of mid-March through late April 2026 for worldwide tenants and mid-April through mid-May for GCC, GCC High, and DoD.

Article Details

Event Type
Public preview rollout of Microsoft Entra passkey sign-in on Windows
Impact
Adds opt-in, phishing-resistant passwordless sign-in to Entra-protected resources on managed and unmanaged Windows devices using device-bound passkeys stored in the Windows Hello container. Each account requires a separate passkey registration on each device. IT administrators must enable Passkeys (FIDO2), create a profile with the required Windows Hello AAGUIDs, and assign it to groups.

Vendors

MicrosoftMicrosoft is adding passkey support to Microsoft Entra on Windows, bringing phishing-resistant, passwordless sign-in via Windows Hello to both managed and unmanaged devices in a public preview.

Products

Microsoft EntraMicrosoft is adding passkey support to Microsoft Entra on Windows, bringing phishing-resistant, passwordless sign-in via Windows Hello to both managed and unmanaged devices in a public preview.Microsoft WindowsMicrosoft is adding passkey support to Microsoft Entra on Windows, bringing phishing-resistant, passwordless sign-in via Windows Hello to both managed and unmanaged devices in a public preview.Windows HelloMicrosoft is adding passkey support to Microsoft Entra on Windows, bringing phishing-resistant, passwordless sign-in via Windows Hello to both managed and unmanaged devices in a public preview.

Related Articles