Microsoft is officially introducing support for passkeys in Windows 11 today as part of a significant update to the desktop operating system.
This feature enables users to access websites and applications without using traditional usernames and passwords. Instead, it relies on your device’s PIN or biometric data for authentication.
Details about the development
Built on FIDO standards, Passkeys were initially unveiled in May 2022 as a robust and phishing-resistant password replacement. Notably, this approach has gained adoption from tech giants like Apple, Google, and other services in recent months.
Although Microsoft initially introduced passkey management in the Windows Insider program in June 2023, this announcement marks its widespread availability.
David Weston, the Vice President of Enterprise and OS Security, emphasized, “Passkeys represent the future of secure cross-platform sign-in management. A passkey generates a unique, highly secure cryptographic credential securely stored on your device.”
Are Passkeys More Secure?
Passkeys offer numerous advantages. They are tailored to each website or app, eliminating the need for complex password creation and the hassle of remembering them.
Furthermore, they sync seamlessly across devices within the same operating system or ecosystem, simplifying the sign-in process.
How do we establish Passkeys on Windows?
On Windows, passkeys are established through Windows Hello. To manage your saved passkeys, navigate to Start > Settings > Accounts > Passkeys.
In the blog post, Weston highlighted the significance of application control, stating,
“Controlling unwanted or malicious code is a critical component of an overall security strategy. Application control is frequently recognized as one of the most effective methods for defending against malware.”
What’s Windows Hello?
In addition to this announcement, Microsoft is introducing Windows Hello for Business on enterprise-managed Windows 11 devices, enhancing user identity security by enabling IT teams to establish policies for Microsoft Entra ID-connected machines.
Two other noteworthy enterprise-focused features include improvements to the integrated Windows Firewall and a novel Custom App Control option.
This option ensures that only approved and trusted applications are allowed on devices, safeguarding endpoints against potentially harmful or rogue code.
What’s Your Password?
There are a number of passwords, some forgotten, some reused, and quite a few better managed. With a passkey, you won’t be in the hassle of remembering or managing passwords. Touching our finger or showing our face to a device for authentication is much easier and safer.
Though passkeys might be more accessible and safer than passwords, they are not the answer to all our security problems online.
The catch: Passkeys Don’t Prevent Malware. Stay Savvy!
What do you think about this development? Let us know in the comments section.
Anas Hasan
October 2, 2023
8 months ago
