Windows 11 Passkeys: A Simpler Way to Sign In

Windows 11 passkeys can make signing in to supported websites and apps quicker without typing a password each time. They use your device’s built-in security, such as Windows Hello, and are set up separately for each account or service. You’ll need a compatible service, a supported browser, and a sign-in method such as a PIN, fingerprint, or face recognition.

What You’ll Need

A Windows 11 PC with a screen lock set up. Windows Hello PIN, fingerprint, or face recognition can confirm it’s you.
A website or app that offers passkeys. Not every service supports them.
A current browser, such as Microsoft Edge or another browser that supports passkeys.
Access to the account’s existing sign-in method while creating the passkey. Some services require your password and an additional verification step.

Step-by-Step

Set up Windows Hello. Open Settings > Accounts > Sign-in options. Choose an available option under ways to sign in, such as PIN (Windows Hello), facial recognition, or fingerprint recognition. Follow the prompts. A PIN is device-specific and is not the same as your Microsoft account password. If your PC does not have compatible face or fingerprint hardware, use a PIN instead.
Check that the service supports passkeys. Sign in to the website or app using your usual method. Open its account, security, or sign-in settings and look for a label such as Passkeys, Sign-in methods, or Passwordless sign-in. The wording and location differ by service. If no passkey option is available, you cannot create one there yet.
Start passkey setup on the service. Select its option to add or create a passkey. If prompted, confirm your identity with your password, a verification code, or another method the service requires. Use the service’s own settings page rather than a link from an unexpected message.
Choose this Windows device when prompted. The browser or Windows may ask where to save the passkey. To use the PC’s built-in sign-in, select an option such as This Windows device or Windows Hello. Exact wording varies. If you instead choose a phone, security key, or password manager, the passkey will be stored there, not necessarily on this PC.
Approve the request. Follow the Windows Hello prompt and enter your PIN or use the configured biometric method. Windows may ask you to confirm the action. Once approved, the service should confirm that the passkey was added; check its passkey or security settings to verify.
Try signing in with the passkey. Sign out of the service, or open a private browsing window if appropriate, then choose Sign in with a passkey or the equivalent option. Enter your account identifier if asked, select the passkey for this device, and approve the Windows Hello prompt. You should not have to type the account password for that sign-in, although the service may request extra verification in some situations.
Keep a recovery route. Before relying on the passkey, confirm that the account has another recovery option you can access, such as a backup email, phone number, or another passkey on a device you control. Follow the service’s security guidance. Do not remove every existing sign-in method until you know how you would regain access if this PC is unavailable.

Common Mistakes

Assuming passkeys work everywhere. A passkey only works with services that support it. Keep using the service’s available sign-in methods where passkeys are not offered.
Confusing a Windows Hello PIN with an account password. The PIN unlocks sign-in on that Windows device; it is not a replacement password you can enter on every device or website.
Saving the passkey in the wrong place. If you choose a phone or another passkey provider during setup, Windows Hello may not be the method used later. Check the prompt before approving it.
Deleting the only recovery method. A passkey can be tied to a device or provider. Keep a tested way to recover the account before removing other methods.
Expecting every browser prompt to look the same. Browser and service wording changes. Read the prompt carefully and confirm which account and storage option it refers to.

Tips

Start with one frequently used account, test sign-in, and then add passkeys to other supported services.
Give the passkey a recognizable device name if the service lets you label it. That makes it easier to identify and remove later.
Set up more than one secure recovery option when the service permits it. Store backup codes, if provided, somewhere private and separate from the device.
Lock your PC when you step away, and keep Windows and your browser updated. Passkeys reduce password entry, but they do not make an unattended, unlocked PC safe.
If you replace or reset the PC, check the service’s account settings and recovery process. Do not assume a passkey saved on the old device has automatically moved.

Troubleshooting

No passkey option appears: Check the service’s help or security settings to confirm it supports passkeys for your account. Make sure you are signed in to the correct account and try an up-to-date browser. If the service does not offer the feature, use its standard sign-in methods.

Windows Hello setup is unavailable: In Settings > Accounts > Sign-in options, check whether you can create a PIN. Some biometric methods require compatible hardware; a PIN can be used when fingerprint or face recognition is unavailable. If a work or school PC controls sign-in options, contact its administrator rather than trying to bypass those controls.

The passkey prompt does not appear: Return to the service’s sign-in page and choose its passkey option rather than entering a password first. Confirm that the account identifier is correct, that the passkey was created for this service, and that you selected the same device or provider used at setup. Close and reopen the browser, then try again.

The PIN or biometric check fails: Make sure you are responding to the Windows prompt on the device where the passkey is stored. Use the PIN option if biometric recognition does not work. If you have forgotten the PIN, use Windows’ available PIN reset option from the sign-in screen or Settings > Accounts > Sign-in options, where available; do not repeatedly guess.

You changed or lost the device: Use the account’s recovery method or another passkey you previously registered. After regaining access, review the account’s registered passkeys and remove any associated with a device you no longer control. Add a passkey on your replacement device if the service supports it.

Frequently Asked Questions

Are Windows 11 passkeys passwords?
Not in the usual sense. A passkey uses cryptographic credentials, with Windows Hello confirming your presence on the device. You generally do not type a shared account password to use it.

Does Windows Hello send my fingerprint or face to the website?
Windows Hello is used locally to approve access to the passkey. The website receives a sign-in response, not a copy of your fingerprint or face data.

Can I use a Windows passkey on my phone?
It depends on where the passkey is stored and what the service and phone support. A passkey saved only on the PC may not be available on the phone; you may need to create or use one stored on the phone or in a compatible passkey provider.

Do passkeys replace my Windows sign-in password?
No. A website passkey is for that service’s account. It does not automatically replace the password or sign-in method you use to unlock Windows.

What if I lose my Windows PC?
Use another registered sign-in or the service’s account recovery process. Once you regain access, remove the lost device’s passkey from the account if possible, and add a passkey to a device you control.

Can I delete a passkey?
Usually, yes. Open the service’s security or passkey settings and remove the entry for that device. Removing it from the service may not erase a separate copy held by a passkey provider, so check both locations if relevant.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →