Passkey (FIDO2) authentication method
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit c577f67 · +3 −6 lines · also on GitHub
11
---
22
title: Passkeys (FIDO2) authentication method in Microsoft Entra ID
33
description: Learn about using passkey (FIDO2) authentication in Microsoft Entra ID to help improve and secure sign-in events
4
−ms.service: entra-id
5
−ms.subservice: authentication
64
ms.topic: concept-article
75
ms.date: 02/02/2026
86
ms.author: justinha
97
author: justinha
108
ms.reviewer: kimhana
11
−manager: dougeby
129
ms.custom: sfi-image-nochange
1310
# Customer intent: As an identity administrator, I want to understand how to use passkey (FIDO2) authentication in Microsoft Entra ID to improve and secure user sign-in events.
1411
---
⋯ 32 unchanged lines
4744
- **Device-bound passkeys**: The private key is created and stored on a single physical device and never leaves it. Examples:
4845
- Microsoft Authenticator
4946
- FIDO2 Security keys
50
−- **Synced passkeys**: The private key is stored in a passkey provider’s cloud and synced across devices signed-in to the same passkey provider account. Synced passkeys do not support attestation. Examples:
51
− - Apple iCloud Keychain
52
− - Google Password Manager
47
+- **Synced passkeys**: The private key is created by the hardware security module (HSM) and encrypted on the local device. This encrypted key is then synced and stored in the cloud passkey provider. Other devices authenticated with the passkey provider may then use the passkey. This may differ depending on the provider. Synced passkeys do not support attestation. Examples:
48
+ - [Apple iCloud Keychain](https://support.apple.com/en-us/102195)
49
+ - [Google Password Manager](https://security.googleblog.com/2022/10/SecurityofPasskeysintheGooglePasswordManager.html)
5350
5451
Synced passkeys offer a seamless and convenient user experience where users can use a device’s native unlock mechanism like face, fingerprint or PIN to authenticate. Based on the learnings from hundreds of millions of consumer users of Microsoft accounts that have registered and are using synced passkeys, we have learned:
5552
⋯ 33 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 03:46 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.