The latest Windows 11 update will help you ditch passwords for good

Microsoft’s Windows 11 update on September 26th introduces general support for the passkey passwordless logins.

Microsoft’s incoming Windows 11 update will introduce public support for passkeys — a passwordless login technology that instead uses your face, fingerprint, or device PIN to sign into accounts. Announced at Microsoft’s AI and Surface launch event on Thursday, the latest Windows 11 update (available from September 26th) will allow users to create, manage, and store passkeys, and use them to access supported websites and services using their device’s own authentication systems.

Microsoft began testing passkey management in the Windows Insider developer channel back in June, so this Windows 11 update is bringing the technology into general availability.

Windows 11 passkeys are created through Windows Hello. Passkeys can be accessed on both a Windows desktop system and/or a mobile device used to authenticate the user’s identity. Following the Windows 11 update, IT teams will also be able to encourage employees to use more secure sign-in methods by removing the option to use passwords for all Windows 11 devices with Windows Hello for Business.

What are passkeys?

Passkeys can replace traditional passwords with your device’s own authentication methods. That way, you can sign in to Gmail, PayPal, or iCloud just by activating Face ID on your iPhone, your Android phone’s fingerprint sensor, or with Windows Hello on a PC. 

Built on WebAuthn (or Web Authentication) tech, two different keys are generated when you create a passkey: one stored by the website or service where your account is and a private key stored on the device you use to verify your identity.

Of course, if passkeys are stored on your device, what happens if it gets broken or lost? Since passkeys work across multiple devices, you may have a backup available. Many services that support passkeys will also reauthenticate to your phone number or email address, or to a hardware security key if you have one.

Meanwhile, other services like Gmail won’t let you completely remove the password from your account yet, just in case. Apple and Google’s password vaults already support them, and so do password managers like 1Password and Dashlane. 1Password has also created an online directory listing services that allow users to sign in using a passkey.

“For the past several years, we’ve been committed to working with our industry partners and the FIDO Alliance to further the passwordless future with passkeys,” said Microsoft in a blog post published on Thursday. “Passkeys are the cross-platform, cross-ecosystem future of accessing websites and applications.”

Microsoft provided Github and Docusign as examples of where they can be used, as passkeys can only replace passwords on websites, apps, and services that already support the WebAuthn public key authentication standard. Password management service 1Password has created a comprehensive directory that tracks everything currently supporting passkey.

Passkeys are expected to eventually replace passwords entirely as a new standard for login technology, but it’s going to take a while for them to be widely supported. Microsoft is one of the technology’s earliest supporters, having announced its plans to adopt passkeys on World Password Day in 2022 alongside other tech giants like Apple and Google.

Source