FIDO2 security key Windows sign-in

Timelines and exceptions · All guidance changes

Entra · Official Microsoft guidance

No content change seen yet. Watched since 5 Oct 17:50 UTC, last read 25 Oct 22:26 UTC, next check today 04:26 UTC. Microsoft's own edits are listed below.

Read the Microsoft source · Link to this observation · My radar

Timeline

From the capture of 5 Oct 17:50 UTC · an earlier observation

Legacy capture: table structure or oversized sections are unavailable for extraction

11 recorded changes

Microsoft's revision log on this page · 14 entries

Dates from the page's own change log or history section. They describe earlier edits, not upcoming policy.

Prerequisites for FIDO2 security keysRequirement1 condition
Unsupported scenariosException1 condition
Device sign-in and unlockRequirement1 condition
Prepare devicesRequirement
Prepare devicesRequirement
Example: Target specific AAGUIDsException1 condition
Example: Target specific AAGUIDsRequirementExceptionScope4 conditions
Enable and target groups for a device-bound passkey profileException1 condition
Enable and target groups for a device-bound passkey profileRequirement
Targeted Intune deploymentScope
Enable with a provisioning packageRequirement
Enable with Group PolicyRequirement1 condition
Provision FIDO2 security keys using Microsoft Graph API (preview)Requirement1 condition
UserAuthenticationMethod
Provision FIDO2 security keys using Microsoft Graph API (preview)Requirement

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

6 Jul 2026
Workaround or override added Enable and target groups for a device-bound passkey profile Microsoft's source, commit 14f5948
6 Jul 2026
No longer on the page Enable security keys for Windows sign-in Microsoft's source, commit 14f5948
6 Jul 2026
Requirement added Enable and target groups for a device-bound passkey profile Microsoft's source, commit 14f5948
6 Jul 2026
Requirement added Enable and target groups for a device-bound passkey profile Microsoft's source, commit 14f5948
6 Jul 2026
No longer on the page Enable security keys for Windows sign-in Microsoft's source, commit 14f5948
6 Jul 2026
No longer on the page Enable security keys for Windows sign-in Microsoft's source, commit 14f5948
6 Jul 2026
Requirement added WebAuthN requires Windows 10 version 1903 or higherin Prerequisites for FIDO2 security keysMicrosoft's source, commit 14f5948
6 Jul 2026
Requirement added Provision FIDO2 security keys using Microsoft Graph API (preview)Microsoft's source, commit 14f5948
6 Jul 2026
Requirement added Provision FIDO2 security keys using Microsoft Graph API (preview)Microsoft's source, commit 14f5948
6 Jul 2026
No longer on the page WebAuthN requires Windows 10 version 1903 or higherin RequirementsMicrosoft's source, commit 14f5948
10 Mar 2026
Requirement added Device sign-in and unlock Microsoft's source, commit 80a0479

Observed history and review priority

Captured 5 Oct 17:50 UTC; extracted 22 Oct 18:57 UTC. Extractor: microsoft-1/9/d9863eb412f92fa5ec3a8ca32e2dd7cfe8095530f456ecb1866608d1166a435d/legacy.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 17

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

23 Oct 09:39 UTC · 13 candidates
12 Oct 19:50 UTC · 13 candidates
6 Oct 17:57 UTC · 16 candidates
5 Oct 17:50 UTC · 16 candidates
6 Jul 08:56 UTC · 12 candidates
26 Mar 22:55 UTC · 10 candidates
10 Mar 13:26 UTC · 10 candidates
10 Mar 02:48 UTC · 9 candidates
9 Mar 21:44 UTC · 9 candidates
9 Mar 21:33 UTC · 9 candidates
9 Mar 21:20 UTC · 9 candidates
9 Mar 21:08 UTC · 9 candidates
9 Mar 20:25 UTC · 9 candidates
14 May 2025 05:25 UTC · 9 candidates
21 Nov 2024 18:08 UTC · 9 candidates
15 Aug 2024 08:17 UTC · 9 candidates
28 Apr 2024 23:55 UTC · 9 candidates

Microsoft's edits

History on GitHub

Commits to the page's source in MicrosoftDocs/entra-docs, with Microsoft's own messages. Commit dates can be hours or days before Learn publishes the change. ChangeIntel keeps a copy of each diff, so an edit stays readable here if GitHub stops serving it. Read today 00:18 UTC.

31 Jul 21:47 UTC Title casing. Metadata onlyServed on LearnView diff
6 Jul 08:56 UTC Split passkey docs (4/5): FIDO2 security key (enable/register/sign-in) (#13776) View diff
26 Mar 22:55 UTC Fix broken internal links — batch 4/7 (20 files) View diff
10 Mar 13:26 UTC Change 'running' to 'requires' for device unlock version View diff
10 Mar 02:48 UTC Remove Authenticator unlock bullet from unsupported scenarios View diff
9 Mar 21:44 UTC Fix missing space in 'security key that' View diff
9 Mar 21:33 UTC Reorganize unsupported scenarios and add device sign-in section View diff
9 Mar 21:20 UTC Add Device sign-in and unlock H3 section View diff
9 Mar 21:08 UTC Remove offline sign-in bullet from unsupported scenarios View diff
9 Mar 20:25 UTC Update Authenticator bullet in unsupported scenarios View diff
14 May 2025 05:25 UTC (AzureCXP) fixes MicrosoftDocs/Entra-docs#422201 View diff
21 Nov 2024 18:08 UTC Update docs/identity/authentication/howto-authentication-passwordless-security-key-windows.md View diff
15 Aug 2024 08:17 UTC Update howto-authentication-passwordless-security-key-windows.md View diff
28 Apr 2024 23:55 UTC removed broken bookmark link View diff

6 metadata-only edits · author, dates or topic labels, no article text

31 Jul 21:42 UTC Metadata quality fixes. Metadata onlyView diff
12 Feb 23:16 UTC [BULK UPDATE] Moves metadata to folder level in docfx.json. Metadata onlyView diff
6 Jun 2025 19:03 UTC Updates Metadata onlyView diff
7 Mar 2025 18:21 UTC BULK [Microsoft Entra] Manager update Metadata onlyView diff
5 Mar 2025 17:07 UTC Updates ms.date for freshness. Coordinated with area owner. Metadata onlyView diff
8 Jan 2025 18:13 UTC december 2024 refresh set 17 Metadata onlyView diff

Retained observations

23 Oct 09:39 UTC
Source metadata changed; retained article content is unchanged.
12 Oct 19:50 UTC
The page title or its body outside the tracked passages changed. Review the source for its effect.
6 Oct 17:57 UTC
Source metadata changed; retained article content is unchanged.
5 Oct 17:50 UTC · shown above

What changed

First observed 18 Oct 2026

No field changes are shown for this selection.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.