Microsoft is Rolling out Support for Passkeys in Windows 11

Sep 26, 2023THNEndpoint Security / Password

Microsoft is officially rolling out support for passkeys in Windows 11 today as part of a major update to the desktop operating system.

The feature allows users to login to websites and applications without having to provide a username and password, instead relying on their device PIN or biometric information to complete the step.

Based on FIDO standards, Passkeys were first announced in May 2022 as a replacement for passwords in a manner that’s both strong and phishing-resistant. It has since been adopted by Apple, Google, and a number of other services in recent months.

While the tech giant added passkey management in the Windows Insider program back in June 2023, the development marks the feature’s general availability.

“Passkeys are the cross-platform future of secure sign-in management,” David Weston, vice president of enterprise and OS Security, said. “A passkey creates a unique, unguessable cryptographic credential that is securely stored on your device.”

Passkeys offer a number of benefits in that they are unique to each website or app, and eliminate the need for setting up complex passwords and the hassle of remembering them. They are also synced across devices within the same operating system (or ecosystem), making the sign-in process more easier.

On Windows, passkeys are created through Windows Hello. Users can manage their saved passkeys by heading to Start > Settings > Accounts > Passkeys.

Alongside the announcement, Microsoft said it’s also bringing Windows Hello for Business to enterprise-managed Windows 11 devices so as to secure user identities by enabling IT teams to set a policy for Microsoft Entra ID joined machines.

Two other notable enterprise-related features include enhancements to the built-in Windows Firewall and a new Custom App Control option to ensure that only approved and trusted apps are allowed onto devices and protect endpoints from rogue code.

“By controlling unwanted or malicious code from running, application control is a critical part of an overall security strategy,” Weston said. “Application control is often cited as one of the most effective means of defending against malware.”