Create and use passkeys in Windows 11 with Windows Hello
In short
- Windows 11, version 22H2 with KB5030310 added native passkey management, but passkeys work in all supported versions of Windows1.
- A passkey's private key stays on your device, and only the public key is registered with the site or app1.
- Starting in Windows 11, version 24H2, apps must get your consent before they can use passkeys. Manage this in Settings > Privacy & security > Passkey access1.
- To sign in with a passkey from a phone, both the PC and the phone need Bluetooth on and an Internet connection1.
- Settings > Accounts > Passkeys lists and deletes passkeys saved on the device. The shortcut ms-settings:savedpasskeys opens it directly3.
To create a passkey in Windows 11, accept a site's offer to save one, select Continue or Create, and confirm with Windows Hello using your face, fingerprint or PIN2. Later, you sign in by unlocking the same way1. To view or delete passkeys saved on the PC, open Settings > Accounts > Passkeys3.
Before you start
Passkeys saved on the PC are unlocked with Windows Hello: your PIN, fingerprint or face1,4. Your biometric data stays on your device and is never shared with Microsoft4.
Windows 11, version 22H2 with KB5030310 added native passkey management. Passkeys still work in all supported versions of Windows1. If an option below is missing, check for updates in Windows Update4.
The site or app must support passkeys. If you're never asked to save one, the site doesn't support them yet2. On a work or school device, your organization may limit which passkeys you can create4.
Steps
- Start on a site that offers passkeys. When the site or app asks to save a passkey, select Continue or Create to use the suggested location. To pick another place, select Change or Save another way2.
- Save it to this PC. Choose Windows device / Windows Hello to keep the passkey on this PC2.
- Confirm with Windows Hello. Finish the save with your face, fingerprint or PIN2.
- Add one to a Microsoft account (optional). Sign in at account.live.com/proofs/manage. Choose Add a new way to sign in or verify, select Face, Fingerprint, PIN, or Security Key, and follow the prompts2.
- Sign in with the passkey. Next time you sign in to that site, approve the prompt with your face, fingerprint or PIN1,2.
- Save it to a phone instead (optional). Choose iPhone, iPad or Android device, then scan the QR code with the phone's camera. Bluetooth pairing may be needed2. Both devices need Bluetooth on and an Internet connection1.
- Manage your passkeys. Open Settings > Accounts > Passkeys, or use the shortcut
ms-settings:savedpasskeys3. To delete a passkey saved on the device, select the more options icon next to its name, then select Delete passkey3.
Check it worked
Open Settings > Accounts > Passkeys. The page lists the passkeys saved on your device3.
Then sign out of the site and sign back in. Windows asks for your face, fingerprint or PIN to use the passkey2.
Common problems
An app can't use your passkeys. Starting in Windows 11, version 24H2, apps need your consent to use passkeys. If you declined, open Settings > Privacy & security > Passkey access and turn on the switch for that app1.
The Windows Hello option is missing. It may not appear if you already saved a passkey to a synced credential manager such as Microsoft Password Manager2.
Your phone can't sign you in. Cross-device sign-in needs Bluetooth turned on and an Internet connection on both the PC and the phone1.
A passkey still shows on your account after you delete it. Settings deletes passkeys saved on the device. For a work or school account, also delete the passkey at mysignins.microsoft.com. Microsoft account passkeys are managed from your account's security dashboard3.
Passkey settings are missing on a work PC. Your organization's IT admin may have turned this feature off3.
Questions
- What is a passkey?
- A passkey replaces a password. Your device creates a key pair: the private key stays on the device, and the public key is registered with the website or app. Each passkey is tied to one site or app, which makes it resistant to phishing1,4.
- Can I save a passkey somewhere other than Windows Hello?
- Yes. When you save it, select Change or Save another way. You can pick a password manager, an iPhone, iPad or Android device, or a physical security key2.
- Why don't I see the Windows Hello option when saving?
- It may not appear if you already saved a passkey to a synced credential manager such as Microsoft Password Manager2.
- Why am I never asked to create a passkey?
- If a site never prompts you to save a passkey, it doesn't support passkeys yet2.
8 Sept 2026: Published.