Entra passkeys on Windows
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 9ed7035 · +13 −2 lines · also on GitHub
⋯ 119 unchanged lines
120120
121121
## FAQ
122122
123
+**Question**: What is the use case for Microsoft Entra passkeys on Windows?
124
+
125
+**Answer**: Use Microsoft Entra passkeys on Windows when:
126
+
127
+- You want passkeys (FIDO2) stored locally on Windows.
128
+- Users access multiple Microsoft Entra accounts from a single PC.
129
+- You want standards-based, phishing-resistant sign-in to Microsoft Entra on unregistered, personal, or shared devices.
130
+
123131
**Question**: Do Microsoft Entra passkeys on Windows replace Windows Hello for Business?
124132
125
−**Answer**: No. Microsoft Entra passkeys on Windows don't replace Windows Hello for Business. Windows Hello for Business remains the recommended solution for corporate managed, Microsoft Entra joined or registered devices. Microsoft Entra passkeys on Windows complement Windows Hello for Business by enabling passkeys (FIDO2) on Windows in scenarios where devices are not joined or registered in Microsoft Entra ID.
133
+**Answer**: No. Microsoft Entra passkeys on Windows don't replace Windows Hello for Business. Windows Hello for Business remains the recommended solution for signing into corporate managed, Microsoft Entra joined or registered devices. Microsoft Entra passkeys on Windows complement Windows Hello for Business by enabling passkeys (FIDO2) on Windows in scenarios where devices are not joined or registered. Microsoft Entra passkeys on Windows don't support device sign-in.
126134
135
+> [!NOTE]
136
+> Users can't register a passkey on Windows if a Windows Hello for Business credential already exists for the same account and container. This block may not apply once the user exceeds 50 total platform credentials.
137
+
127138
**Question**: Are Microsoft Entra passkeys synced?
128139
129
−**Answer**: No. Microsoft Entra passkeys on Windows are device-bound and stored in the local Windows Hello container. They aren't synced across devices. Each device requires a separate passkey registration for each work or school account.
140
+**Answer**: No. Microsoft Entra passkeys on Windows are device-bound and stored in the local Windows Hello container. They aren't synced across devices. Each device requires a separate passkey registration for each Microsoft Entra account.
130141
131142
## Related content
132143
⋯ 2 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 9 Oct 21:50 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.