Passkey requirements and limitations

Timelines and exceptions · All guidance changes

Entra · Official Microsoft guidanceObserved changes retained

Retained observation

Source metadata changed; retained article content is unchanged.

Documentation metadata only

Read the current Microsoft source · Link to this observation · Compare any two versions

Observation details · observed 6 Oct 17:57 UTC

Observed by ChangeIntel: 6 Oct 17:57 UTC
Source update metadata: 15 Jun 17:40 UTC
First observed on this installation: 5 Oct 17:50 UTC
Last successful check: today 20:00 UTC
Next check due: 21 Oct 02:00 UTC

Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.

This is an earlier observation; review the latest in My radar.

Timeline

From the capture of 6 Oct 17:57 UTC · an earlier observation

Legacy capture: table structure or oversized sections are unavailable for extraction

Microsoft's revision log on this page · 14 entries

Dates from the page's own change log or history section. They describe earlier edits, not upcoming policy.

Frequently asked questions about passkeysRequirement1 condition
Access to this page requires authorization. You can try signing in or changing directories.…
Frequently asked questions about passkeysRequirement1 condition
Access to this page requires authorization. You can try changing directories.…
When do users get prompted to register a passkey during sign in?Requirement2 conditions
How can admins monitor or audit passkey usage?Recommendation
Are passkeys in Microsoft Entra quantum proof?Scope
Can administrators control which devices a synced passkey is available on, or prevent passkeys from being shared?Recommendation1 condition
How does Microsoft Authenticator store passkeys on a device?Exception2 conditions
Can I restore or sync Authenticator passkeys to a new device?Exception1 condition
Do I need to enable Bluetooth to perform cross-device authentication?Requirement
Can I have multiple passkeys in Authenticator?Exception2 conditions
I tried to register a passkey in the Microsoft Authenticator app but received an error of “Passkey could not be added” or “unknown error”, what should I do?Recommendation
I tried to register a passkey in the Microsoft Authenticator app but received an error of “Passkey could not be added” or “unknown error”, what should I do?Recommendation1 condition
I'm on an Android 14 device, and I followed all the steps. Why can't I register passkeys in the Authenticator app?Recommendation1 condition
I stored my passkey in the Microsoft Authenticator app in my Android personal profile and I can't use it in my work profile?RequirementScope

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

Observed history and review priority

Captured 6 Oct 17:57 UTC; extracted 16 Oct 16:10 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c/legacy.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 5

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

12 Oct 19:50 UTC · 0 candidates
6 Oct 17:57 UTC · 15 candidates
5 Oct 17:50 UTC · 15 candidates
15 Jun 16:45 UTC · 12 candidates
23 Apr 17:09 UTC · 12 candidates

Microsoft's edits

History on GitHub

Commits to the page's source in MicrosoftDocs/entra-docs, with Microsoft's own messages. Commit dates can be hours or days before Learn publishes the change. ChangeIntel keeps a copy of each diff, so an edit stays readable here if GitHub stops serving it. Read today 23:36 UTC.

15 Jun 16:45 UTC [BULK UPDATE] User Story 573314: Ensure every doc in MSec repos has an author from MSec Docs (entra-docs-pr 4) (#13372) Served on LearnView diff
23 Apr 17:09 UTC Consolidate passkey FAQs into single topic View diff

Official documentation · 12 Oct 2026
Passkeys and FIDO2
Official documentation · 12 Oct 2026
Entra passkeys on Windows
Official documentation · 12 Oct 2026
Passkeys in Microsoft Authenticator
Official documentation · 12 Oct 2026
FIDO2 security key Windows sign-in
Official documentation · 12 Oct 2026
Passkey platform and browser compatibility
Official documentation · 12 Oct 2026
Passkey (FIDO2) authentication method

Retained observations

12 Oct 19:50 UTC
8 removed passages (about 50 words). The changed wording mentions prerequisites. Review the source to confirm the effect.
6 Oct 17:57 UTC · shown above
5 Oct 17:50 UTC
Baseline for retained history; no earlier retained text to compare.

What changed

First observed 18 Oct 2026

No field changes in the recorded history.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.