diff --git a/windows/security/identity-protection/passkeys/includes/create-passkey.md b/windows/security/identity-protection/passkeys/includes/create-passkey.md new file mode 100644 index 0000000000..f5ec391065 --- /dev/null +++ b/windows/security/identity-protection/passkeys/includes/create-passkey.md @@ -0,0 +1,29 @@ +--- +author: paolomatarazzo +ms.author: paoloma +ms.date: 11/07/2023 +ms.topic: include +--- + +:::row::: + :::column span="4"::: + + 1. Open a website or app that supports passkeys + + :::column-end::: +:::row-end::: +:::row::: + :::column span="4"::: + + 2. Create a passkey from your account settings + + :::column-end::: +:::row-end::: +:::row::: + :::column span="3"::: + 3. Select the option **Use another device** > **Next** + :::column-end::: + :::column span="1"::: + :::image type="content" source="../images/save-passkey.png" alt-text="Screenshot showing a dialog box prompting the user to pick a location to store the passkey." lightbox="../images/save-passkey.png" border="false"::: + :::column-end::: +:::row-end::: diff --git a/windows/security/identity-protection/passkeys/includes/use-passkey.md b/windows/security/identity-protection/passkeys/includes/use-passkey.md new file mode 100644 index 0000000000..39aa37f431 --- /dev/null +++ b/windows/security/identity-protection/passkeys/includes/use-passkey.md @@ -0,0 +1,30 @@ +--- +author: paolomatarazzo +ms.author: paoloma +ms.date: 11/07/2023 +ms.topic: include +--- + +:::row::: + :::column span="3"::: + 1. Open a website or app that supports passkeys + :::column-end::: + :::column span="1"::: + :::column-end::: +:::row-end::: +:::row::: + :::column span="3"::: + 2. Select **Sign in with a passkey**, or a similar option + :::column-end::: + :::column span="1"::: + :::image type="content" source="../images/website.png" alt-text="Screenshot of a website offering the passkey sign in option." lightbox="../images/website.png" border="false"::: + :::column-end::: +:::row-end::: +:::row::: + :::column span="3"::: + 3. Select the option **Use another device** > **Next** + :::column-end::: + :::column span="1"::: + :::image type="content" source="../images/use-passkey.png" alt-text="Screenshot of the passkey dialog prompting the user to pick where the passkey is stored." lightbox="../images/use-passkey.png" border="false"::: + :::column-end::: +:::row-end::: \ No newline at end of file diff --git a/windows/security/identity-protection/passkeys/index.md b/windows/security/identity-protection/passkeys/index.md index 06247b9a94..9ca4657426 100644 --- a/windows/security/identity-protection/passkeys/index.md +++ b/windows/security/identity-protection/passkeys/index.md @@ -5,7 +5,7 @@ ms.collection: - highpri - tier1 ms.topic: overview -ms.date: 09/27/2023 +ms.date: 11/07/2023 appliesto: - ✅ Windows 11 - ✅ Windows 10 @@ -40,50 +40,23 @@ Passkeys have several advantages over passwords, including their ease of use and ### Create a passkey -Follow these steps to create a passkey from a Windows device: +By default, Windows offers to save the passkey locally on the **Windows device**, in which case the passkey is protected by Windows Hello (biometrics and PIN). You can also choose to save the passkey in one of the following locations: -:::row::: - :::column span="4"::: - - 1. Open a website or app that supports passkeys - - :::column-end::: -:::row-end::: -:::row::: - :::column span="4"::: - - 2. Create a passkey from your account settings - - :::column-end::: -:::row-end::: -:::row::: - :::column span="4"::: - 3. Choose where to save the passkey. By default, Windows offers to save the passkey locally if you're using Windows Hello or Windows Hello for Business. If you select the option **Use another device**, you can choose to save the passkey in one of the following locations: - :::column-end::: -:::row-end::: -:::row::: - :::column span="3"::: - -- **This Windows device**: the passkey is saved locally on your Windows device, and protected by Windows Hello (biometrics and PIN) - **iPhone, iPad or Android device**: the passkey is saved on a phone or tablet, protected by the device's biometrics, if offered by the device. This option requires you to scan a QR code with your phone or tablet, which must be in proximity of the Windows device - **Linked device**: the passkey is saved on a phone or tablet, protected by the device's biometrics, if offered by the device. This option requires the linked device to be in proximity of the Windows device, and it's only supported for Android devices - **Security key**: the passkey is saved to a FIDO2 security key, protected by the key's unlock mechanism (for example, biometrics or PIN) - :::column-end::: - :::column span="1"::: - :::image type="content" source="images/save-passkey.png" alt-text="Screenshot showing a dialog box prompting the user to pick a location to store the passkey." lightbox="images/save-passkey.png" border="false"::: - :::column-end::: -:::row-end::: -:::row::: - :::column span="4"::: - 4. Select **Next** - :::column-end::: -:::row-end::: - Pick one of the following options to learn how to save a passkey, based on where you want to store it. #### [:::image type="icon" source="images/laptop.svg" border="false"::: **Windows device**](#tab/windows) +[!INCLUDE [use-passkey](includes/create-passkey.md)] + +:::row::: + :::column span="4"::: + 4. Select **This Windows device** > **Next** + :::column-end::: +:::row-end::: :::row::: :::column span="3"::: @@ -107,6 +80,13 @@ Pick one of the following options to learn how to save a passkey, based on where #### [:::image type="icon" source="images/qr-code.svg" border="false"::: **New phone or tablet**](#tab/mobile) +[!INCLUDE [use-passkey](includes/create-passkey.md)] + +:::row::: + :::column span="4"::: + 4. Select **iPhone, iPad or Android device** > **Next** + :::column-end::: +:::row-end::: :::row::: :::column span="3"::: @@ -130,6 +110,13 @@ Pick one of the following options to learn how to save a passkey, based on where #### [:::image type="icon" source="images/phone.svg" border="false"::: **Linked phone or tablet**](#tab/linked) +[!INCLUDE [use-passkey](includes/create-passkey.md)] + +:::row::: + :::column span="4"::: + 4. Select your linked device name (e.g. **Pixel**) > **Next** + :::column-end::: +:::row-end::: :::row::: :::column span="3"::: @@ -153,6 +140,13 @@ Pick one of the following options to learn how to save a passkey, based on where #### [:::image type="icon" source="images/usb.svg" border="false"::: **Security key**](#tab/key) +[!INCLUDE [use-passkey](includes/create-passkey.md)] + +:::row::: + :::column span="4"::: + 4. Select **Security key** > **Next** + :::column-end::: +:::row-end::: :::row::: :::column span="3"::: @@ -178,48 +172,27 @@ Pick one of the following options to learn how to save a passkey, based on where ### Use a passkey -Follow these steps to use a passkey: +When you open a website or app that supports passkeys, if a passkey is stored locally, you're automatically prompted to use Windows Hello to sign in. You can also choose to use a passkey from one of the following locations: -:::row::: - :::column span="3"::: - 1. Open a website or app that supports passkeys - :::column-end::: - :::column span="1"::: - :::column-end::: -:::row-end::: -:::row::: - :::column span="3"::: - 2. Select **Sign in with a passkey**, or a similar option - :::column-end::: - :::column span="1"::: - :::image type="content" source="images/website.png" alt-text="Screenshot of a website offering the passkey sign in option." lightbox="images/website.png" border="false"::: - :::column-end::: -:::row-end::: -:::row::: - :::column span="3"::: - 3. If a passkey is stored locally and protected by Windows Hello, you're prompted to use Windows Hello to sign in. If you select the option **Use another device**, you can choose one of the following options: - :::column-end::: -:::row-end::: -:::row::: - :::column span="3"::: -- **This Windows device**: use this option to use a passkey that is stored locally on your Windows device, and protected by Windows Hello - **iPhone, iPad or Android device**: use this option if you want to sign in with a passkey stored on a phone or tablet. This option requires you to scan a QR code with your phone or tablet, which must be in proximity of the Windows device - **Linked device**: use this option if you want to sign in with a passkey stored on a device that is in proximity of the Windows device. This option is only supported for Android devices - **Security key**: use this option if you want to sign in with a passkey stored on a FIDO2 security key - :::column-end::: - :::column span="1"::: - :::image type="content" source="images/use-passkey.png" alt-text="Screenshot of the passkey dialog prompting the user to pick where the passkey is stored." lightbox="images/use-passkey.png" border="false"::: - :::column-end::: -:::row-end::: Pick one of the following options to learn how to use a passkey, based on where you saved it. #### [:::image type="icon" source="images/laptop.svg" border="false"::: **Windows device**](#tab/windows) +[!INCLUDE [use-passkey](includes/use-passkey.md)] + +:::row::: + :::column span="4"::: + 4. Select **This Windows device** > **Next** + :::column-end::: +:::row-end::: :::row::: :::column span="3"::: - 4. Select a Windows Hello unlock option + 5. Select a Windows Hello unlock option :::column-end::: :::column span="1"::: @@ -229,7 +202,7 @@ Pick one of the following options to learn how to use a passkey, based on where :::row::: :::column span="3"::: - 5. Select **OK** to continue signing in + 6. Select **OK** to continue signing in :::column-end::: :::column span="1"::: @@ -238,10 +211,17 @@ Pick one of the following options to learn how to use a passkey, based on where #### [:::image type="icon" source="images/qr-code.svg" border="false"::: **Phone or tablet**](#tab/mobile) +[!INCLUDE [use-passkey](includes/use-passkey.md)] + +:::row::: + :::column span="4"::: + 4. Select **iPhone, iPad or Android device** > **Next** + :::column-end::: +:::row-end::: :::row::: :::column span="3"::: - 4. Scan the QR code with your phone or tablet where you saved the passkey. Once the connection to the device is established, follow the instructions to use the passkey + 5. Scan the QR code with your phone or tablet where you saved the passkey. Once the connection to the device is established, follow the instructions to use the passkey :::column-end::: :::column span="1"::: @@ -251,17 +231,24 @@ Pick one of the following options to learn how to use a passkey, based on where :::row::: :::column span="4"::: - 5. You're signed in to the website or app + 6. You're signed in to the website or app :::column-end::: :::row-end::: #### [:::image type="icon" source="images/phone.svg" border="false"::: **Linked phone or tablet**](#tab/linked) +[!INCLUDE [use-passkey](includes/use-passkey.md)] + +:::row::: + :::column span="4"::: + 4. Select your linked device name (e.g. **Pixel**) > **Next** + :::column-end::: +:::row-end::: :::row::: :::column span="3"::: - 4. Once the connection to the linked device is established, follow the instructions on the device to use the passkey + 5. Once the connection to the linked device is established, follow the instructions on the device to use the passkey :::column-end::: :::column span="1"::: @@ -271,7 +258,7 @@ Pick one of the following options to learn how to use a passkey, based on where :::row::: :::column span="3"::: - 5. You're signed in to the website or app + 6. You're signed in to the website or app :::column-end::: :::column span="1"::: @@ -280,10 +267,17 @@ Pick one of the following options to learn how to use a passkey, based on where #### [:::image type="icon" source="images/usb.svg" border="false"::: **Security key**](#tab/key) +[!INCLUDE [use-passkey](includes/use-passkey.md)] + +:::row::: + :::column span="4"::: + 4. Select **Security key** > **Next** + :::column-end::: +:::row-end::: :::row::: :::column span="3"::: - 4. Unlock the security key using the key's unlock mechanism + 5. Unlock the security key using the key's unlock mechanism :::column-end::: :::column span="1"::: @@ -293,7 +287,7 @@ Pick one of the following options to learn how to use a passkey, based on where :::row::: :::column span="3"::: - 5. You're signed in to the website or app + 6. You're signed in to the website or app :::column-end::: :::column span="1":::