How to Set Up Microsoft Passkey for Passwordless Sign-In

Microsoft passkeys let you sign in to your Microsoft account without a password using biometrics or device PIN. Passkeys are more secure than passwords and resistant to phishing attacks. This guide shows how to set up passkeys across all your devices.

What You Need

• Microsoft account (personal, work, or school)
• Supported device:
  • Windows 10/11 with Windows Hello
  • iPhone/iPad with iOS 16+ and Face ID/Touch ID
  • Android device with Android 9+ and biometrics
  • Hardware security key (FIDO2 compatible)
• Modern browser: Edge, Chrome, Safari, or Firefox

---

Set Up Passkey on Windows

Step 1: Enable Windows Hello

First, ensure Windows Hello is set up:

1. Open Settings > Accounts > Sign-in options
2. Set up at least one Windows Hello method:
   • Facial recognition (requires compatible camera)
   • Fingerprint (requires fingerprint reader)
   • PIN (always available)

Step 2: Add Passkey to Microsoft Account

1. Go to account.microsoft.com/security
2. Sign in to your Microsoft account
3. Under Ways to sign in, find Passkey
4. Click Add a new way to sign in > Face, fingerprint, PIN, or security key
5. Select Windows device
6. Windows Hello prompts for authentication
7. Complete face scan, fingerprint, or PIN entry
8. Name your passkey (e.g., "Work Laptop")

---

Set Up Passkey on iPhone/iPad

1. Open Safari and go to account.microsoft.com/security
2. Sign in to your Microsoft account
3. Tap Add a new way to sign in
4. Select Face, fingerprint, PIN, or security key
5. Choose iPhone, iPad, or Android device
6. iOS prompts to create a passkey
7. Authenticate with Face ID or Touch ID
8. Passkey saves to iCloud Keychain

Note: Your passkey syncs across Apple devices signed into the same iCloud account.

---

Set Up Passkey on Android

1. Open Chrome and go to account.microsoft.com/security
2. Sign in to your Microsoft account
3. Tap Add a new way to sign in
4. Select Face, fingerprint, PIN, or security key
5. Choose iPhone, iPad, or Android device
6. Android prompts to create a passkey
7. Authenticate with fingerprint, face unlock, or screen lock
8. Passkey saves to Google Password Manager

Note: Requires Android 9 or later and Google Play Services.

---

Set Up Hardware Security Key

For maximum security, use a FIDO2 hardware key:

1. Go to account.microsoft.com/security
2. Click Add a new way to sign in
3. Select Use a security key
4. Choose USB device or NFC device
5. Insert your security key when prompted
6. Touch the key to confirm (if required)
7. Set a PIN for the key if prompted
8. Name your security key

Recommended security keys:

• YubiKey 5 Series
• Feitian ePass
• Google Titan Key

---

Sign In with Your Passkey

Once set up, signing in is simple:

1. Go to any Microsoft sign-in page
2. Enter your email address
3. Click Sign-in options or Other ways to sign in
4. Select Face, fingerprint, PIN, or security key
5. Complete biometric authentication on your device
6. You're signed in—no password needed

---

Manage Your Passkeys

View Registered Passkeys

1. Go to account.microsoft.com/security
2. Look under Ways to sign in
3. Find your passkeys listed by device name

Remove a Passkey

1. Click on the passkey you want to remove
2. Select Remove
3. Confirm the removal

When to remove passkeys:

• Lost or stolen device
• Selling or giving away a device
• Replacing an old device

---

Passkeys vs Other Sign-In Methods

Method	Phishing-Resistant	Device Required	Recovery
Passkey	Yes	Yes	Backup methods needed
Password	No	No	Email/phone reset
Authenticator app	Partial	Yes	Backup codes
SMS code	No	Yes (phone)	Phone number change

---

Troubleshooting

Passkey Option Not Available

• Ensure your browser supports WebAuthn
• Update your browser to the latest version
• For work accounts, check with IT if passkeys are enabled

Biometric Authentication Fails

• Clean fingerprint sensor or camera
• Ensure adequate lighting for face recognition
• Use device PIN as fallback
• Re-register your biometrics in device settings

Cross-Device Sign-In

You can use a phone's passkey to sign in on a computer:

1. Select Sign in with a passkey from another device
2. Scan the QR code with your phone
3. Authenticate on your phone
4. Sign-in completes on the computer

---

Best Practices

• Register multiple passkeys: Add passkeys on all your devices
• Keep backup methods: Don't remove all other sign-in options
• Name passkeys clearly: Use descriptive names like "iPhone 15" or "Work Laptop"
• Remove unused passkeys: Delete passkeys from old or lost devices

---

Related Articles

• How to Transfer Microsoft Authenticator to a New Phone
• How to Recover a Microsoft Account