Windows 11 Passkey (Windows Hello) Features [Oct 2024]

As advocates for passkey, we delve today into Microsofts newest strides within the passkey realm (login via Windows Hello instead of passwords). Microsoft, an influential member of the FIDO alliance the backbone behind the passkey and WebAuthn standards has long promised bolstered support for passkeys (besides their already available offering for many of their services like GitHub, Microsoft 365 or LinkedIn). Their recent Windows 11 developer preview gave us a chance to explore these claims in detail, and today, we're here to share these insights with you.

Using Windows 11 Insider Preview Build 23486, we encountered a refreshed user dialogue upon passkey creation. The prompt efficiently notifies users when a passkey is stored. Moreover, it highlights essential details, displaying the user ID (e.g., Vincent+windows11@corbado.com) alongside the relying party ID (e.g., passkeys.eu).

The challenge of managing passkeys on Windows machines is set to change. Previously, users resorted to external browsers like Google Chrome for passkey management tasks with a GUI, be it deletion or a simple overview of saved passkeys. Thankfully, the new Windows 11 preview comes with a user- friendly solution with its integrated passkey manager.

For those eager to try, here's how to delete a passkey (see also our detailed deletion guide):

1. Navigate to: Settings > Accounts > Passkeys and look for the website corresponding to the passkey.

2. Hit the three-dot menu of your chosen entry and select "Delete passkey."

3. A confirmation prompt will appear. Click "Delete" to finalize.

While our exploration was insightful, one area remained untested: the synchronization of passkeys across (Windows) devices. The passkeys we trialed remained exclusive to individual devices (single-device passkeys). Its still unclear how Microsoft will approach this feature, especially given its successful implementation by Apple and Google in 2022 and further developments in 2023. Especially if a Windows account has Windows Hello already activated (for single-device passkeys), it remains interesting how the synchronization will work.

The enhancements in Windows 11 are bound to amplify the adoption rate of passkeys, especially in the desktop and corporate domains where Windows remains dominant. As the OS captures more market share and with more individuals investing in new computers, passkeys' prevalence will surge.

For official details on this update, check out Microsoft's official announcement here and here.

There's also a buzz around potential synced passkey support on Windows 10. While not universal, its introduction to a broad range of Windows 10 devices could further catalyze user adoption and demand for passkeys. At the moment, per Microsoft lifetime policy, the Windows 10 22H2 version from October 2022 is planned to be the last feature release for Windows 10 followed by two years of security support.

Backporting the synced passkey functionality from Windows 11 to Windows 10 seems to be a rather easy endeavor as insiders tell us. Maybe there will be an out-of-band release enabling synced passkeys (via Windows Hello), enhanced passkey management and Conditional UI before Windows 10s end of life in October 2025.

Still, the biggest question is when Windows Hello Sync will be introduced by Microsoft in general connecting created local passkeys with the cloud and making them truly cross-device like Apple (via iCloud Keychain) and Google (via Google Password Manager) did. At the moment, there is no hint within the official documentation, release notes or in the Microsoft Account when this might happen.

After much anticipation, Microsoft has announced significant updates to passkey support in Windows 11, marking a major step forward in the journey toward a passwordless future:

• Introduction of Synced Passkeys to Microsoft Accounts: Users can now sync their passkeys across all Windows 11 devices using their Microsoft accounts, making passkeys truly cross-device and enhancing the seamless authentication experience on Windows platforms.

• Third-Party Passkey Provider Support: Windows 11 now supports a plug-in model for third-party passkey providers like 1Password and Bitwarden. This allows for seamless integration and enables users to utilize passkeys created on mobile devices directly on Windows 11.

• Enhanced Native UX for Passkeys: A redesigned Windows Hello experience offers an intuitive interface for saving and managing passkeys. Users can protect their passkeys using facial recognition, fingerprint, or PIN, with the added security of end-to-end encryption and protection by the device's TPM.

These updates are highly anticipated, and users are eagerly awaiting to see how this insider build will look and when it will be released to production.