Bitwarden Adds Passkey Sign-In for Windows 11

Summary
Bitwarden announced Windows 11 sign-in with passkeys stored in its encrypted vault. The feature is available on all plans and requires Entra ID-joined devices, FIDO2 sign-in, and a registered Entra ID passkey.
Key points
- Bitwarden announced support for using passkeys stored in its vault to sign in to Windows 11.
- The feature is available on all plans, including the free tier.
- It requires an Entra ID-joined device, FIDO2 security key sign-in enabled, and a registered Entra ID passkey in the Bitwarden vault.
- Users select the security key sign-in option and scan a QR code with a mobile device to access the stored passkey.
- Bitwarden says its synced vault lets users recover access from another device if they lose their phone.
- Passkey authentication uses cryptographic credentials rather than passwords; the article says this reduces phishing and credential-exposure risk.
Article Details
- Event Type
- Bitwarden announced passkey-based sign-in support for Windows 11.
- Impact
- Users can authenticate to eligible Windows 11 devices with an Entra ID passkey stored in Bitwarden’s synced vault, avoiding password entry and reducing exposure to phishing and credential theft. The feature is available on all plans but requires an Entra ID–joined device, FIDO2 security key sign-in to be enabled, and a registered Entra ID passkey in the vault.
Vendors
BitwardenBitwarden now lets users sign into Windows 11 with passkeys stored in the manager’s encrypted vault, enabling phishingâresistant passwordless authentication.MicrosoftBitwarden states that Microsoft will roll out passkey login on Windows this month, and it depends on the Microsoft Entra ID configuration.
Products
Entra IDThe feature is available on all plans and requires Entra ID–joined devices, FIDO2 security key signâin enabled, and a registered Entra ID passkey in the Bitwarden vault, with Bitwarden acting as the passkey providerWindows 11Bitwarden now lets users sign into Windows 11 with passkeys stored in the manager’s encrypted vault, enabling phishingâresistant passwordless authentication.
