To use a passkey in Windows 11, create one in a supported website’s account settings, choose where to save it, then select the passkey option when you next sign in. A passkey saved on this PC uses Windows Hello to confirm your identity with your PIN, face, or fingerprint. A passkey saved on a phone or in a password manager uses that provider’s confirmation process.
A website passkey is different from your Windows sign-in PIN. The PIN unlocks the passkey locally; it is not a password you type into the website. These steps cover website and app accounts, not changing how you log in to Windows itself. Passkeys saved on this PC need a PIN, face, or fingerprint, so keep that in mind before you turn off your PIN on Windows 11.
Before You Start
Use an updated browser and Windows 11 installation, and make sure the website supports passkeys. For a passkey stored on this PC, configure Windows Hello under Settings > Accounts > Sign-in options. A PIN is an option if your PC does not have compatible face or fingerprint hardware. Microsoft explains the available choices in its Windows sign-in guide.
Keep another working sign-in or recovery method while setting up your first passkey. On a work or school account, your organization may restrict which passkey providers you can use.
How to Create a Passkey in Windows 11
- Sign in to the website or app using your existing method.
- Open its account security settings and choose its passkey-creation option. The wording varies by service.
- Review the proposed storage location. Choose Change or Save another way, if offered, to see alternatives.
- Choose the Windows device, a supported password manager, a phone or tablet, or a security key.
- Complete the requested PIN, biometric, or security-key confirmation.
- Wait for the site to confirm that the passkey was added.
Do not assume the browser’s suggested location is this PC. Check the provider name before saving. Microsoft’s passkey creation guide shows the available paths.
Choose Where to Save Your Passkey
This Windows device: a local Windows Hello passkey stays on this PC. Plan a second sign-in method before replacing or resetting the computer.
A synced password manager: supported managers can make the passkey available on other devices signed in to that manager. Availability depends on your browser, provider, and organization.
A phone or tablet: follow the QR-code prompt and approve on that device. This is useful when the passkey is on your phone rather than the computer you are using.
A security key: save to a compatible physical key and follow its touch or PIN prompt. Keep the key accessible when you need to sign in.
How to Sign In With the Passkey
- Open the same website’s sign-in page.
- Choose its passkey option, which may be under Sign-in options or Try another way.
- Select the account and the location where you saved the passkey.
- Approve with Windows Hello, your password manager, your phone, or your security key.
- Confirm that you reach the intended account before relying on the new method.
For phone-based sign-in, keep the phone near the PC, enable Bluetooth on both devices, and connect both to the internet. They do not have to use the same Wi-Fi network. Scan the sign-in QR code with the device that holds the passkey and approve there.
Add a Passkey to a Personal Microsoft Account
- Open your Microsoft account’s Advanced security options and sign in.
- Choose Add a new way to sign in or verify.
- Choose Face, Fingerprint, PIN, or Security Key.
- Select the storage location and complete its prompts.
Work or school accounts use a different page: Security info. Choose Add sign-in method and an available passkey option. If your organization does not offer one, ask IT about supported methods.
View or Delete a Passkey Saved on This PC
Check another working sign-in method before deleting a passkey. Removing your only usable method can leave you dependent on account recovery.
- Open Settings.
- Select Accounts.
- Select Passkeys.
- Find the account you want to manage.
- If you intend to remove it, open its three-dot menu, choose Delete passkey, and confirm.
This page manages passkeys saved locally in Windows. Manage synced passkeys in the password manager that stores them. To revoke an old account credential, also check that website’s security settings; removing a local copy and removing the account’s registered sign-in method are different actions. See Microsoft’s passkey management guide.
If the Passkey Is Missing or Sign-In Fails
No matching passkey: confirm that you chose the correct account and provider. A passkey stored only on another PC will not appear as a local passkey here. Use that device or another sign-in method to add one for this computer.
No phone QR code or connection failure: check Bluetooth, proximity, and internet access on both devices. Cancel a timed-out request and start again. A work policy can also block cross-device authentication.
A new or reset PC: recover access with a synced manager or another registered method, create and test a replacement passkey, then remove the obsolete one. Do not delete the old method first.
Microsoft’s passkey troubleshooting page covers specific errors. If the Windows controls are unfamiliar, see our guide to opening Settings in Windows 11.
Matthew Burleigh has been writing tech tutorials since 2008. His writing has appeared on dozens of different websites and been read hundreds of millions of times.
After receiving his Bachelor’s and Master’s degrees in Computer Science he spent several years working in IT management for small businesses. However, he now works full time writing content online and creating websites.
His main writing topics include iPhones, Microsoft Office, Google Apps, Android, and Photoshop, but he has also written about many other tech topics as well.