Set Up a Passkey for Your Microsoft Account (Fast Guide)
How to Set Up a Passkey for Your Microsoft Account (Step-by-Step)
Passwords are easy to forget, and they are even easier for attackers to steal through phishing. Passkeys solve that problem by replacing passwords with a sign-in method tied to your device, protected by biometrics (Face ID, fingerprint) or a device PIN.
In this guide, you’ll set up a passkey for your personal Microsoft account so you can sign in faster and more securely.
What Is a Passkey
A passkey is a modern sign-in method that uses public key cryptography. The short version:
- Your device stores a private key securely.
- Microsoft stores the matching public key.
- When you sign in, your device proves it has the private key.
- You approve the sign-in with Face ID, fingerprint, or a device PIN.
No password gets typed. Nothing useful can be stolen by a fake login page.
Before You Start
Make sure you have:
- A personal Microsoft account (Outlook.com, Hotmail.com, Live.com)
- A supported device and lock method:
- Windows 10/11 with Windows Hello set up (PIN, face, or fingerprint)
- iPhone/iPad with Face ID or Touch ID
- Android with biometric unlock enabled
- A modern browser: Microsoft Edge, Chrome, or Safari
Step 1: Open Microsoft Account Security
- Go to https://account.microsoft.com
- Sign in to your Microsoft account.
- Open Security.
- Select Advanced security options.
Tip: If you do not see “Advanced security options,” Microsoft may prompt you to verify identity first.
Step 2: Add a New Passkey
- In Advanced security options, find Passkeys.
- Select Add a new passkey.
- Confirm your identity using one of your existing methods (password, Authenticator, SMS, email).
Step 3: Choose Where to Save the Passkey
You typically get two choices:
Option A: Save on this device (most common)
- Windows saves it via Windows Hello
- iPhone/iPad saves it to the iCloud Keychain (if enabled)
- Android saves it to the device’s passkey provider (commonly Google Password Manager)
Select This device, then continue.
Option B: Save on another device (QR code)
If you want to store the passkey on your phone but you are setting it up from a PC:
- Choose Another device
- Scan the QR code using your phone
- Approve the setup with biometrics or PIN
Step 4: Verify with Biometrics or PIN
Complete the prompt on your device:
- Face recognition
- Fingerprint
- Device PIN
Once approved, your passkey is created and stored securely.
How to Sign In Using Your Passkey
Next time you sign in:
- Enter your Microsoft account email.
- Choose Sign in with a passkey (wording varies slightly by screen).
- Approve the sign-in with Face ID, fingerprint, or your device PIN.
You are in, without typing a password.
How to Manage or Remove a Passkey
If you replace a phone or retire a PC, remove the passkey from your account.
- Go to https://account.microsoft.com
- Open Security > Advanced security options
- Open Passkeys
- Remove old passkeys you no longer use
Best practice: Keep at least two sign-in methods available (for example, a passkey plus Microsoft Authenticator) so you do not get locked out.
Common Issues and Quick Fixes
“Passkeys option not showing”
- Confirm you are using a personal Microsoft account.
- Try Edge or Chrome.
- Sign out, then sign in again and re-check Security.
“Windows Hello isn’t set up”
- On Windows: Settings > Accounts > Sign-in options
- Configure a PIN first, then add face or fingerprint if available.
“I switched phones”
- Remove the old passkey from your Microsoft account.
- Add a new passkey on the new device.
Why This Matters (Security Benefits)
Passkeys provide:
- Strong resistance to phishing
- No password reuse risk
- Faster sign-in with fewer prompts
- A better path toward passwordless security
If you write about security for end users or admins, passkeys are an easy win because they reduce both account compromise risk and password-reset friction.
