Microsoft has announced a new feature that allows everyday users, not just commercial subscribers, to sign into their Microsoft accounts and apps using passkeys with their face, fingerprint, or device PIN.
This support for Microsoft consumer accounts is available across Windows, Google, and Apple platforms, marking a step closer to Microsoft’s long-term vision of a password-free world.
Starting Thursday, users can sign into their Microsoft accounts using passkeys via desktop and mobile browsers, with mobile app support expected to roll out soon.
The timing of this announcement coincides with World Password Day, a day when tech companies often highlight their efforts to move away from traditional password-based authentication methods.
Google also celebrated the occasion by announcing that its passkey support has been used over a billion times across more than 400 million Google Accounts.
Microsoft’s move towards passkey authentication comes in response to the increasing frequency of password attacks. Since the introduction of Windows Hello and Windows Hello for Business in 2015, password attacks have risen significantly.
According to Microsoft, password attacks remain popular because they are still effective, highlighting the need for alternative authentication methods.
Passkey authentication works by generating a unique cryptographic public-private key pair for each user account. The private key is securely stored on the user’s device and can be unlocked using biometric data or a PIN.
This approach is considered more secure than traditional password-based authentication and is resistant to phishing attacks.
Microsoft aims to simplify security for users by eliminating the need to remember complex passwords for each app and website.
However, it’s important to note that passkey authentication may not be foolproof, and criminals may find ways to exploit it in the future.