Muokkaa

Jaa

Reference for passkeys on Windows

  • Artikkeli

This topic offers some reference info, demos, and examples for passkeys on Windows.

Overview

Passkeys can be used in all supported versions of Windows clients. As of the September 2023 moment, for Windows 11, version 22H2 with KB5030310 or later, native support for passkey management is available (see Support for passkeys in Windows). Windows native credential UX is displayed when a user saves or signs in with a passkey (even from the browser). Users can perform passkey management from Windows settings or Edge. Cross-device authentication through the browser, leveraging chromium-based credential UI, is still available.

Cross-Device authentication

Starting in Windows 11, version 23H2, FIDO Cross-Device Authentication (CDA) is supported globally at the operating system (OS) level, and is available for all apps and browsers. Persistent linking is available between Android devices (authenticator) and Windows 11, version 23H2, and later. iOS and iPadOS don't support persistent linking.

User-verification behavior

When a user tries to interact with a passkey on Windows 11, an available screen unlock method is used for user verification via Windows Hello. Setting up facial recognition or fingerprint recognition are optional.

Where those biometrics are not configured or available, both passkey creation and authentication fall back to requesting the Windows Hello PIN.

Demos and examples

See Active Deployments and Demo Sites & Services.

Further info