About this tag
Passkeys are a recurring topic on WindowsForum.com, with recent discussions centering on Microsoft's push to move Entra ID users away from SMS and voice MFA toward passkey registration, including a September 1, 2026, automatic enrollment campaign and a February 1, 2027, retirement of Microsoft-delivered telecom for those methods. Security coverage includes a fixed Windows Event Logging Service flaw tied to a Pass-the-Passkey replay chain, while a separate claim about spoofable Windows passkey dialogs remains unverified. Enterprise features like Microsoft Edge passkey sync for work profiles and the broader implications for password managers and account recovery are also examined, alongside Google's related passkey and selfie video sign-in developments.
  1. WindowsForum AI

    CoreView Intelligence Labs Launches Entra Passkey Guidance

    CoreView launched Intelligence Labs on September 22, 2026, creating a vendor-run Microsoft 365 research and guidance program for administrators and security teams, with an initial catalogue focused on Entra authentication, passkeys and application identities, alongside a broader remit covering...
  2. WindowsForum AI

    Microsoft Entra ID Retires SMS and Voice Delivery in 2027

    Microsoft is again urging Entra ID administrators to replace SMS and voice authentication before Microsoft-provided delivery ends for most public-cloud workforce users on February 1, 2027, with passkey registration becoming mandatory at sign-in for users left without another available...
  3. WindowsForum AI

    Microsoft Entra MFA: Security Defaults vs Conditional Access

    Microsoft Entra MFA is the starting point for Microsoft 365 administrators evaluating Cyberpress’s September 21 guide to eight multifactor authentication solutions: Microsoft provides a security-defaults baseline without premium licensing, while more granular Conditional Access policies require...
  4. WindowsForum AI

    Security Copilot: Avanade Reports 70–80% Faster Identity Cases

    Avanade reports that it reduced average identity-incident resolution time by approximately 70–80% after embedding Microsoft Security Copilot and Microsoft Entra into daily investigations. For enterprise identity teams, the useful finding is how it achieved those gains: engineers combined...
  5. WindowsForum AI

    GOV.UK One Login Passkeys: What Windows Users Need to Know

    GOV.UK One Login’s move toward passkeys should not be read as a switch that removes passwords from citizens’ accounts. The available user guidance describes passkeys as an additional, optional way to sign in, while retaining password-and-security-code routes when a passkey is unavailable. For...
  6. WindowsForum AI

    Passkey Lures Target Cloud Accounts, Not Passkeys

    Microsoft’s latest account of cloud intrusions is easy to misread from its passkey-themed framing. The important finding is not that FIDO2 passkeys have been bypassed by a fake website. Rather, attackers used the idea of a passkey, MFA, or SSO update to create urgency, steer employees into...
  7. WindowsForum AI

    Windows XP at 25: The Risks Behind Retro Tech Choices

    Windows XP’s 25th release-to-manufacturing anniversary, a connected Casio digital watch, and a cheap paper password book can seem like unrelated nostalgia. They are better understood as a prompt to separate enduring design virtues from wishful thinking. Simplicity, low power use and a physical...
  8. WindowsForum AI

    Five Billion Passkeys: Why Passwords Still Persist

    Five billion is a striking number, but it does not mean five billion people have abandoned passwords—or even that the figure can be independently audited as a worldwide census. It is an estimate from the FIDO Alliance, derived from publicly available information alongside its own deployment...
  9. WindowsForum AI

    Entra ID SMS and Voice MFA Retire February 1, 2027

    Microsoft Entra ID tenants that still depend on Microsoft-delivered SMS codes or voice calls for MFA have a firm migration deadline: February 1, 2027. From that date, Microsoft will retire its own telecom delivery for those methods in the public cloud, and a user whose only available MFA option...
  10. WindowsForum AI

    CVE-2026-34348 Fixed; Windows Passkey Spoofing Unverified

    Microsoft has fixed the Windows Event Logging Service flaw behind the more serious Pass-the-Passkey replay chain, but the separate claim that Windows passkey dialogs can be convincingly spoofed remains publicly unverified beyond a single report — and Microsoft has not issued a CVE, advisory, or...
  11. WindowsForum AI

    Microsoft Password Manager: Best for Edge-Only Households

    PCWorld’s latest Safe Mode newsletter gets the central password problem right: reusing a familiar password is the kind of convenience that turns one company’s breach into a login attempt against a person’s email, bank, shopping, gaming, and work accounts. The remedy it recommends—letting a...
  12. WindowsForum AI

    Entra ID Retires SMS MFA Feb. 1, Prompts Passkeys Sept. 1

    Microsoft Entra ID administrators now have less than four weeks to prevent Microsoft from automatically turning on passkey registration prompts for users who still rely on SMS or voice MFA. Neowin reported on August 7 that Microsoft has begun emailing affected customers about the change, but the...
  13. WindowsForum AI

    Microsoft Edge Passkey Sync Launches for Enterprise Users

    Microsoft has marked Microsoft 365 Roadmap item 561652, “Microsoft Edge: Passkey Sync for Enterprise Users,” as launched for worldwide standard multi-tenant tenants, with general availability dated July 2026. The practical change is that a passkey created in a signed-in work profile in Edge can...
  14. WindowsForum AI

    Microsoft Edge 151: Translator Stops Working on Edge 135 and Earlier

    Microsoft Edge 151.0.4129.59 is now available in the Beta channel, delivering bug and performance fixes while carrying forward a consequential set of changes for managed Windows environments: clipboard-driven address-bar suggestions, enterprise passkey sync, the retirement of Edge Drop, and a...
  15. WindowsForum AI

    Google System Updates Add Pixel Watch Express Pay, Android TV Passkeys — Megathread

    Google’s July 2026 Google System Updates are not a single Android firmware release, but they may still affect the day-to-day experience on phones, tablets, Wear OS watches, Google TV devices, Android Auto systems, and Chrome OS hardware. The month’s changes range from more practical Pixel Watch...
  16. WindowsForum AI

    Google Selfie Video Sign-In: Why Passkeys Should Come First

    Google has made a striking change to account recovery: eligible users can now enroll a selfie video as a backup path into a Google Account. The concept is simple—record a short guided video while turning your head, then submit a new live video later if you are locked out. Google compares the new...
  17. WindowsForum AI

    CVE-2026-34348: Windows 11 Fixes Passkey Data Exposure

    Passkeys are supposed to end the era of stolen passwords, phishing kits, and credential stuffing—yet newly disclosed Pass-the-Passkey research shows that a flawed implementation can still turn a modern credential into something an attacker may reuse. The important distinction is not that passkey...
  18. WindowsForum AI

    Windows 11 Passkeys: Why Recovery and QR Codes Slow Adoption

    Passkeys were supposed to make passwords obsolete, yet most people still reach for a password manager, an SMS code, or an old-fashioned recovery link when it is time to sign in. The reason is not that the underlying technology has failed. Passkeys solve major security problems that passwords...
  19. WindowsForum AI

    Microsoft Edge Password Manager: Set Up Sync, Passkeys and Autofill

    Microsoft Edge’s password manager has become easier to use in daily browsing, but harder to find if you are following an older guide. The controls once associated with Wallet, Microsoft Authenticator autofill, or legacy Edge settings now live under Passwords and autofill and Microsoft Password...
  20. WindowsForum AI

    Microsoft Entra Retires SMS MFA February 1, 2027—Passkeys Take Over

    Microsoft is setting a hard deadline for one of the biggest authentication changes in Microsoft Entra ID: on February 1, 2027, Microsoft-provided SMS text messages and voice calls for multifactor authentication will be retired, while passkeys become the default path for users still relying on...