Guide to Passkeys on Windows Devices

Passkeys offer a more secure and convenient method for logging into websites and applications compared to traditional passwords. Passkeys, unlike passwords that require users to remember and type, store secrets on a device and can leverage the device’s unlock mechanism, such as biometrics or a PIN. This is a comprehensive Guide to Passkeys on Windows Devices that outlines how to create, use, and manage passkeys on Windows devices. See Install and configure TeamPass Password Manager, and How to sync your passwords across iOS and Mac devices.

How Passkeys Work

During registration with an online service, a user’s device generates a key pair. The user’s device securely retains the private key, while the service registers the public key. To authenticate, the client device must prove possession of the private key by signing a challenge.

The Windows Hello unlock factors, which include biometrics or PIN, unlock private keys and ensure a secure authentication process. Here are other related guides: How to use a Fido Certified U2F Key for Authentication, Password Policy: How to Create via GPO with Group Policy Object, How to change your Windows Computer login Password.

Passkeys vs. Passwords

Advantages of Passkeys: Passkeys offer several advantages over passwords:

Ease of Use: Creating passkeys is easy; users don’t need to memorize them, and the system securely stores them on the user’s device.
Uniqueness: Each passkey is unique to a website or application, preventing reuse and enhancing security.
Phishing Resistance: Passkeys are resistant to phishing attempts, as the private key remains on the user’s device, reducing the risk of unauthorized access.
Cross-Device Authentication: Passkeys facilitate authentication across devices and platforms, promoting convenience.

Windows Edition and Licensing Requirements

Supported Windows Editions: Passkeys are supported on the following Windows editions:

Windows Pro
Windows Enterprise
Windows Pro Education/SE
Windows Education

To upgrade to Windows Pro see Upgrade Windows 11 Pro to Enterprise and vice Versa.

How to Create a Passkey

Creating a Passkey: You can create a passkey and choose to save it locally on your Windows device, iPhone, iPad, Android device, linked device, or a security key. Follow these steps:

To create and save a passkey on a Windows device, such as Windows 11, open a website or app that supports passkeys. For example, I use Google by going to my Google account settings. Then, proceed by clicking the Passkeys button.

Next, click on “Create a passkey.”

At the next pop-up, choose ‘Continue‘ to save your passkey on your Windows 11 device. If you prefer to save your passkey on an iPhone, iPad, Android device, linked device, or by using a security key, choose “Use another device.”

*Click Continue to save your passkey on Windows device*

Complete the Windows Hello verification.

Confirm the passkey storage.

How to use a Passkey

When accessing a passkey-supported website or app, you can use a passkey stored locally or on another device. Follow these steps:

Open the website or app; for instance, if you are signing into your Gmail account, you can do so by clicking on “Try another way” when required to input your password.

Next, click on “Use your passkey.”

Select the desired storage location (e.g., Windows device) and complete the Windows Hello unlock process.

Proceed with the sign-in.

Managing Passkeys

Starting in Windows 11, version 22H2 with KB5030310, you can use the Settings app to manage passkeys:

To view your passkeys on Windows 11, press Windows + I to access Settings. Select “Accounts” and click on “Passkeys” in the right pane.

A list of saved passkeys will be displayed. To delete a passkey, click the three dots “…” next to the passkey you want to delete and click “Delete passkey.”

This comprehensive guide ensures a seamless understanding of passkeys on Windows devices, covering their functionality, advantages, usage, and management.

FAQs

Can I use passkeys on any Windows edition, or are they limited to specific versions?

Passkeys are supported on specific Windows editions, including Windows Pro, Windows Enterprise, Windows Pro Education/SE, and Windows Education. The availability of passkeys is determined by the edition of your Windows operating system. Make sure to check the compatibility of your Windows edition to ensure that passkeys are supported.

Is there a way to manage and delete passkeys for websites or apps on my Windows device?

Yes, starting in Windows 11, version 22H2 with KB5030310, you can manage passkeys using the Settings app. Navigate to Settings > Accounts > Passkeys. Here, you’ll find a list of saved passkeys, and you can delete a passkey by selecting “… > Delete passkey” next to the respective passkey name. This feature provides users with control over their passkey management.

Can I use a passkey stored on a device other than my Windows device, such as a phone or tablet?

Certainly, passkeys offer flexibility in storage. You can save a passkey on an iPhone, iPad, Android device, linked device, or a security key. Depending on your preference, you can choose the desired storage location during the passkey creation process. Whether you want to use a passkey stored on your Windows device, a linked device, or a security key, the guide provides step-by-step instructions for each option.

I hope you found this blog post helpful. Please let me know in the comment section if you have any questions.