{"id":15475,"date":"2026-03-19T09:01:36","date_gmt":"2026-03-19T00:01:36","guid":{"rendered":"https:\/\/m365jp.net\/?p=15475"},"modified":"2026-03-19T09:07:59","modified_gmt":"2026-03-19T00:07:59","slug":"mc1247893-updated-microsoft-entra-passkeys-on-windows-now-support-phishing-resistant-sign-in","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2026-03-19-mc1247893-updated-microsoft-entra-passkeys-on-windows-now-support-phishing-resistant-sign-in","title":{"rendered":"MC1247893 | (Updated) Microsoft Entra passkeys on Windows now support phishing-resistant sign-in"},"content":{"rendered":"
\n
\n
\n\n\n\n
MC1247893 | (Updated) Microsoft Entra passkeys on Windows now support phishing-resistant sign-in<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n\n\n\n\n\n\n\n\n
Classification<\/th>\nstayInformed<\/td>\n<\/tr>\n
Last Updated<\/th>\n03\/18\/2026 23:06:48<\/td>\n<\/tr>\n
Start Time<\/th>\n03\/09\/2026 22:24:16<\/td>\n<\/tr>\n
End Time<\/th>\n06\/29\/2026 07:00:00<\/td>\n<\/tr>\n
Message Content<\/th>\n\n

Updated March 18, 2026: We have updated the timeline. Thank you for your patience. <\/p>\n

[Introduction]<\/b><\/p>\n

We\u2019re introducing Microsoft Entra passkeys on Windows <\/b>to enable phishing-resistant sign-in to Entra-protected resources. This update allows users to create device\u2011bound passkeys stored in the Windows Hello container <\/i>and authenticate using Windows Hello methods (face, fingerprint, or PIN). It also expands passwordless authentication to Windows devices that aren\u2019t Entra\u2011joined or registered, helping organizations strengthen security and reduce reliance on passwords.<\/p>\n

[When this will happen]<\/b><\/p>\n

    \n
  • Public preview: <\/b>
    <\/b>\n
      \n
    • Worldwide<\/b>: Late March 2026 to late April 2026<\/li>\n
    • GCC<\/b>: Late April 2026 to late May 2026<\/li>\n
    • GCC High<\/b>: Late April 2026 to late May 2026<\/li>\n
    • DoD<\/b>: Late April 2026 to late May 2026<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n

      [How this affects your organization]<\/b><\/p>\n

      Who is affected<\/i><\/p>\n

        \n
      • Organizations using Microsoft Entra ID whose users sign in from Windows devices, including corporate\u2011managed, personal, and shared PCs.<\/li>\n<\/ul>\n

        What will happen<\/i><\/p>\n

          \n
        • There is no impact to your organization unless you opt in.<\/b><\/li>\n
        • Microsoft Entra passkeys on Windows will be available as a phishing\u2011resistant, passwordless sign\u2011in option for Entra\u2011protected cloud resources.<\/li>\n
        • Users will authenticate with Windows Hello (face, fingerprint, or PIN).<\/li>\n
        • Users can use passkeys on Windows devices that are not Entra\u2011joined or registered, enabling use on personal, shared, and unmanaged PCs.<\/li>\n
        • Users can sign-in to multiple Entra accounts on the same Windows device, with each account registering its own passkey.<\/li>\n
        • Passkeys on Windows are device\u2011bound and do not sync across devices; each device requires separate registration per Entra account.<\/li>\n
        • Windows Hello for Business remains recommended for managed, Entra\u2011joined or registered devices; passkeys supplement unmanaged device scenarios and do not support device sign\u2011in.<\/li>\n
        • Existing Conditional Access and authentication strength policies continue to apply with no required configuration changes unless you choose to enable passkeys.<\/li>\n
        • Users can\u2019t register a passkey on Windows if a Windows Hello for Business credential already exists for the same account and container. This block may not apply once the user exceeds 50 total credentials across passkeys (FIDO2), Windows Hello for Business, and Mac Platform Credentials.  <\/li>\n<\/ul>\n

          [What you can do to prepare]<\/b><\/p>\n

          If you want to enable Entra passkeys on Windows during public preview:<\/p>\n

            \n
          • Enable the Passkeys (FIDO2)<\/b> authentication method in Authentication Methods policies.<\/li>\n
          • Create a passkey profile and configure:\n
Machine Translation<\/th>\n\n

2026\u5e743\u670818\u65e5\u66f4\u65b0:\u30bf\u30a4\u30e0\u30e9\u30a4\u30f3\u3092\u66f4\u65b0\u3057\u307e\u3057\u305f\u3002\u3054\u8f9b\u62b1\u3044\u305f\u3060\u304d\u3042\u308a\u304c\u3068\u3046\u3054\u3056\u3044\u307e\u3059\u3002 <\/p>\n

[\u306f\u3058\u3081\u306b]<\/b><\/p>\n

Windows \u3067Microsoft Entra\u30d1\u30b9\u30ad\u30fc <\/b>\u3092\u5c0e\u5165\u3057\u3001Entra\u3067\u4fdd\u8b77\u3055\u308c\u305f\u30ea\u30bd\u30fc\u30b9\u3078\u306e\u30d5\u30a3\u30c3\u30b7\u30f3\u30b0\u8010\u6027\u30b5\u30a4\u30f3\u30a4\u30f3\u3092\u53ef\u80fd\u306b\u3057\u307e\u3059\u3002\u3053\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306b\u3088\u308a\u3001\u30e6\u30fc\u30b6\u30fc\u306f Windows Hello\u30b3\u30f3\u30c6\u30ca <\/i>\u306b\u4fdd\u5b58\u3055\u308c\u305f\u30c7\u30d0\u30a4\u30b9\u30d0\u30a6\u30f3\u30c9\u30d1\u30b9\u30ad\u30fc\u3092\u4f5c\u6210\u3057\u3001Windows Hello\u306e\u65b9\u6cd5(\u9854\u3001\u6307\u7d0b\u3001\u307e\u305f\u306fPIN)\u3092\u4f7f\u3063\u3066\u8a8d\u8a3c\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002\u307e\u305f\u3001Entrajoin\u3084\u767b\u9332\u3055\u308c\u3066\u3044\u306a\u3044Windows\u30c7\u30d0\u30a4\u30b9\u306b\u3082\u30d1\u30b9\u30ef\u30fc\u30c9\u30ec\u30b9\u8a8d\u8a3c\u3092\u62e1\u5927\u3057\u3001\u7d44\u7e54\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5f37\u5316\u3068\u30d1\u30b9\u30ef\u30fc\u30c9\u4f9d\u5b58\u306e\u8efd\u6e1b\u3092\u652f\u63f4\u3057\u307e\u3059\u3002<\/p>\n

[\u3044\u3064\u8d77\u3053\u308b\u304b]<\/b><\/p>\n