Post #2782112
2026-04-15 09:45 UTC
I wish Microsoft account (personal) was a bit better documented. 🤯
It's possible to add a #passkey / Windows Hello, without having provided 2FA. Naturally, you can't turn around and use that passkey as 2FA.
But if you sign in with that passkey and then provide 2FA, Microsoft sets a flag and you can use the passkey as 2FA going forward.
(By default, 2FA is required for some actions like opening "Additional security options".)
Replies (2)
-
@sourcejedi@mastodon.social 2026-05-28 17:55
Wrote up the test procedure for this. And another experience that's bugging me. #passkey 's are a good concept, but #Microsoft is not impressing me right now. https://webapps.stackexchange.com/questions/182396/if-you-use-a-passkey-to-sign-in-does-microsoft-still-ask-for-a-verification-code/
-
@0f1ab009@mastodon.social 2026-04-15 10:16
@sourcejedi@mastodon.social This is good to know. I thought that an existing 2FA method was required to add passkey.