Daily.Entra.News
Aboutmerill.net
Microsoft Entra ID

Sign in with a synced passkey (FIDO2)

7 July 2026Updated+55 / −41 lines

In brief

Learn how to sign in to Microsoft Entra ID with a synced passkey (FIDO2) for your work or school account by using a browser on Windows, iOS, or Android.

What Entra admins need to know

Review the documentation change to determine whether it affects tenant configuration, security posture, or rollout plans.

This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.

Documentation change

Open on Microsoft Learn ↗

The comparison below is an extract of the Microsoft Learn article showing only the changed content. Open the full article for complete context.

Sign in with a synced passkey (FIDO2) for

This article describes how to sign in to your work or school account

This article covers different ways that users can sign in to Microsoft Entra ID with a synced passkey.

Your passkey can be synced to the same device where you want to sign in, or it can be synced to another device.

For more information about how to sign in with

Use a passkey in Microsoft Authenticator, see Sign in with passkeys in Authenticator for Android and iOS devices.

For more information about the availability of Microsoft Entra ID passkey (FIDO2) authentication across native apps, web browsers, and operating systems, see Support for FIDO2 authentication with Microsoft Entra ID.

Sign in with a passkey (FIDO2) saved onfrom the same device

  1. Open your browser and go to the resource you're trying to access,Select Sign in for a Microsoft application or website such as Officethe Azure portal.

  2. You can enter your username to sign in. If you most recently used a passkey to sign in, you're automatically prompted to sign in with a passkey. Choose your account.

    :::image type="content" source="media/how-to-sign-in-passkey/choose-synced-passkey-account.png" alt-text="Screenshot that shows the Pick an account dialog with a work or school account." lightbox="media/how-to-sign-in-passkey/choose-synced-passkey-account.png":::

    Otherwise, you can enter your username and select Other waysNext to sign in.

    :::image type="content" source="media/how-to-sign-in-passkey/sign-in-options-name.png" alt-text="Screenshot that shows the Sign in dialog with a username entered and the Next button." lightbox="media/how-to-sign-in-passkey/sign-in-options-name.png":::

  3. Complete multifactor authentication (MFA).

  4. You're signed in with your work or school account.

Use a passkey from another device

  1. Select Sign in, and then for a Microsoft application or website such as the Azure portal.

  2. In Microsoft Edge, right-click where you enter your name, select Face, fingerprint, PIN,Use passkey from another device > Use a phone, tablet or security key.

    Alternatively, :::image type="content" source="media/how-to-sign-in-passkey/use-passkey-from-another-device-edge.png" alt-text="Screenshots that show the Use passkey from another device option in Microsoft Edge and the Use a phone, tablet or security key option in the Sign in using a saved passkey dialog." lightbox="media/how-to-sign-in-passkey/use-passkey-from-another-device-edge.png":::

    In Google Chrome, select where you enter your name, then select Use passkey from another device.

    :::image type="content" source="media/how-to-sign-in-passkey/use-passkey-on-another-device-chrome.png" alt-text="Screenshot that shows the Use passkey from another device option in the Chrome account list." lightbox="media/how-to-sign-in-passkey/use-passkey-on-another-device-chrome.png":::

    You can also clickSign in, select Sign-in options to sign in more conveniently without having to enter a username. If you chose Sign-in options, select> Face, fingerprint, PIN,PIN or security key. Otherwise, skip to next step.

    :::image type="content" source="media/how-to-sign-in-passkey/sign-in-options-combined.png" alt-text="Screenshots that show the Sign-in options button and the Face, fingerprint, PIN or security key option.":::

  3. YourSelect iPhone, iPad, or Android device opens a security window. To use. The other sign-in options that are shown vary depending on your security key, followaccount and device.

    :::image type="content" source="media/how-to-sign-in-passkey/sign-in-options-device.png" alt-text="Screenshot that shows the stepsiPhone, iPad, or Android device option in the operating system or browserChoose a passkey dialog. Verify that it's you by scanning your fingerprint or entering your PIN." lightbox="media/how-to-sign-in-passkey/sign-in-options-device.png":::

  • The device where you want to sign in shows a QR code. Scan the QR code with the other device that has your passkey.

    :::image type="content" source="media/how-to-sign-in-passkey/scan-code-no-name.png" alt-text="Screenshot that shows the Sign in with a passkey (FIDO2) saved on another device

    1. Open your browser and godialog with a QR code to the resource you're trying to access, such as Office.scan." border="true" lightbox="media/how-to-sign-in-passkey/scan-code-no-name.png":::

    2. You can enter your username to sign in. If you most recently used a passkey to sign in, you're automatically prompted to sign in with a passkey. Otherwise,On iOS, selectOther ways to sign in, and then select Face, fingerprint, PIN, or security key.

      Alternatively, select Sign-in options to sign in more conveniently without having to enter a username. If you chose Sign-in options, select Face, fingerprint, PIN, or security key. Otherwise, skip to the next step.

    3. Your device opens a security window. To begin cross-device authentication, follow the steps in the operating system or browser prompt. On Windows 11 23H2 or later, select iPhone, iPad, or Android device.

    4. A QR code should appear on the screen. Now, on your mobile device, open the camera app and scan the QR code.

    5. Select Sign in with passkey when the option appears.. On Android, select Use passkey to sign in.

    6. Bluetooth and an internet connection are required for this step and must both be enabled on your mobile and remote device.both devices. The device where you want to sign in shows this screen:

    7. To select your passkey, follow :::image type="content" source="media/how-to-sign-in-passkey/device-connected.png" alt-text="Screenshot that shows the steps in the iOS operating system dialog. Verify yourself by using face, fingerprint or device PIN.

    8. You’re now signed in to Microsoft Entra ID.

    Sign in with a passkey (FIDO2) saved ondialog with a security key

      Device connected message." border="true" lightbox="media/how-to-sign-in-passkey/device-connected.png":::

    1. Open your browser and go to the resource you're trying to access, such as OfficeComplete multifactor authentication (MFA).

    2. You can enter your username to sign in. If you most recently used a passkey to sign in, you're automatically prompted to signsigned in with a passkey. Otherwise, select Other ways to sign in, and then select Face, fingerprint, PIN,the synced passkey for your work or security key.

      Alternatively, select Sign-in options to sign in more conveniently without having to enter a username. If you chose Sign-in options, select Face, fingerprint, PIN, or security key. Otherwise, skip to the next step.

    3. Your device opens a security window. To use your security key, follow the steps in the operating system or browser dialog. Scan your fingerprint or enter your PIN to verify that it's you.

    4. Once you're signed in, your device displays a screen similar to this one:

      :::image type="content" border="true" source="media/howto-authenticate-passwordless-passkey-direct/welcome.png" alt-text="Screenshot of Microsoft Welcome page.":::school account.

    Known issues

    Review the following known issues to avoid problems with synced passkey (FIDO2) sign-in.

    Bluetooth must be enabled on both devices for cross-device authentication

    If you’you're signing-signing in by using a different mobile device, Bluetooth must be enabled on the device you are're trying to sign-sign in on and the mobile device with the passkey.

    Some organizations restrict Bluetooth usage, which includes the use of passkeys. In such cases, organizations can allow passkeys by permitting Bluetooth pairing exclusively with passkey-enabled FIDO2 authenticators. For more information, see Passkeys in Bluetooth-restricted environments.

    Orphaned passkey

    An orphaned passkey occurs when a passkey remains on a user’user's device but is no longer registered with Microsoft Entra ID. This typically happens if the passkey was deleted from a user's Security info or removed due to policy changes, but the local credential was notwasn't cleaned up.

    If you're blocked from sign-in by an orphaned passkey:

    1. Remove the orphaned passkey from the device or passkey authenticator.provider.
    2. Re-register a new passkey after cleanup.

    Next stepsRelated content