logo

Microsoft: Security keys may prompt for PIN after recent updates

ID: 912508d1-2fae-5a1d-9496-5ab95fb321a3

STIX ID: report--912508d1-2fae-5a1d-9496-5ab95fb321a3

Feed Name: Bleeping Computer

Date Published: 2025-11-26

Date Updated: 2026-04-20

Author: Sergiu Gatlan

...
...

Microsoft advises that recent Windows 11 updates (starting with the Sept 29, 2025 KB5065789 preview and completed with the Nov KB5068861 security update) enable WebAuthn-compliant behavior where FIDO2 security keys may require users to set or enter a PIN during authentication when user verification is requested as preferred by an RP/IdP; organizations that want to avoid PIN prompts should configure WebAuthn user verification to discouraged.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.