Microsoft to roll out Entra passkeys on Windows in late April

Microsoft is rolling out Entra passkey support for Windows devices to enable phishing-resistant, passwordless authentication using device‑bound FIDO2 passkeys stored in the Windows Hello container, with admin controls via Conditional Access and Authentication Methods policies. The feature, aimed at corporate, personal, and shared devices—including unmanaged Windows endpoints—will support Windows Hello biometrics/PIN and is intended to reduce reliance on passwords; the article notes recent credential-theft attacks against Microsoft Entra SSO as background but provides no incident-specific details.