Windows 11 22H2 adds a built-in passkey manager for Windows Hello

On September 26's Windows 11 update includes several security improvements, including a new passkeys management dashboard designed to help users go passwordless more easily and tools to reduce the attack surface.

Passkeys are linked to specific devices (e.g., computers, tablets, or smartphones) and play a pivotal role in mitigating the threat of data breaches by offering robust defenses against phishing attacks, blocking threat actors from stealing credentials, and thwarting unauthorized access attempts.

Compared to traditional passwords, passkeys are a more secure option as they remove the need to memorize passwords for each website or online service.

Microsoft's passwordless push was prompted by the three-fold increase in phishing attacks targeting user credentials since last year, reaching over 4,000 incidents every second, according to Redmond's internal data.

To fend off these attacks, the company is making it possible to generate passkeys using Windows Hello, enabling users to sign into their website or web app accounts with their faces, PINs, or fingerprints. Additionally, Windows 11 customers will also be able to use Bluetooth-paired mobile devices to complete sign-in processes.

After the update, a passkeys management dashboard will be available in the Settings app from Accounts > Passkeys.

"Windows 11 will make it much harder for hackers who exploit stolen passwords via phishing attacks by empowering users to replace passwords with passkeys," said David Weston, Microsoft VP for Enterprise and OS Security.

"Passkeys are the cross-platform future of secure sign-in management. Microsoft and other technology leaders are promoting passkeys as part of the FIDO Alliance."

The passkeys management dashboard was first introduced in June with the Windows 11 Preview Build 23486 release pushed to Insiders in the Dev Channel.

Microsoft and Apple first confirmed their commitment to passkeys in May 2022, endorsing Web Authentication (WebAuthn) credentials. One year later, Google also announced it's rolling out support for passkeys for Google Accounts to allow users to sign in without entering a password or using 2-Step Verification (2SV).



Managing passkeys on Windows 11 (BleepingComputer)