You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
phishing resistant sign-in
About this tag
Phishing resistant sign-in methods, such as passkeys and Windows Hello, are becoming a standard part of account security on Windows. Microsoft's approach combines biometrics or PINs with device-based storage, including sync via Microsoft Password Manager, to create credentials that cannot be stolen through phishing attacks. Hardware security keys and third-party managers are also supported. This tag covers discussions on how these technologies work in practice for personal and work/school accounts, focusing on the user experience and the shift toward passwordless authentication in Windows environments.
Microsoft has pushed passkeys from a future-facing concept into a practical sign-in option for both personal and work/school accounts, and the company’s guidance now makes the process feel deliberately familiar: pick a device, choose a storage location, confirm with a biometric or PIN, and you...