Microsoft brings passkey to consumer accounts, move aimed at reducing the impact of phishing attacks

Microsoft has long been a proponent of passwordless sign-ins. Almost a decade ago, it first announced Windows Hello, negating the need for passwords while logging into Windows devices. Now, the Redmond-based tech giant has introduced passkeys for signing into the native Microsoft account.

Explaining how passkeys work, Microsoft in the official announcement, states,

Passkey access uses two unique keys, known as a cryptographic key pair. One key is stored safely on your device, guarded by your biometrics or PIN. The other key stays with the app or website for which you create the passkey. You need both parts of the key pair to sign in, just as you need both your key and the bank’s key to get into your safety deposit box. Because this key pair combination is unique, your passkey will only work on the website or app you created it for, so you can’t be tricked into signing in to a malicious look-alike website.

When it comes to passkeys, no information ever leaves the device, eliminating the likelihood of a successful phishing attack. But they do sync across devices, so you don’t have to set up a new one every time you switch devices.

Last year, Microsoft introduced passkeys in Windows 11, and most of us guessed that its integration into account sign-in is around the corner.

The best part is that passkeys work across the Windows, Google, and Apple ecosystem. Although initially, only desktop devices would be able to use passkeys. Microsoft has committed to expanding passkey support for Microsoft apps on mobile devices in the coming weeks.

The process to set up a Microsoft login passkey is simple. All you have to do is visit the official website on the relevant device and follow the on-screen instructions. It shouldn’t take more than a minute!

Microsoft also shared a video on YouTube to get users acquainted with the concept of passkeys and to boost adoption.

Apple and Google have already introduced passkeys for their users. In a recent blog post, Google highlighted how passkeys have been used over 1 billion times across 400 million accounts.

We will have to wait and see if Microsoft passkeys deliver the same results!

Are you excited about the change? Share with our readers in the comments section.