Saturday, 11 April 2026

Microsoft Entra passkey on Windows guidance now covers unmanaged and shared devices

The period’s substantive Intune change is an expansion of passwordless guidance to describe Microsoft Entra passkey on Windows. The documentation identifies it as a FIDO2 passkey using Windows Hello biometric verification without requiring device join or registration, and positions it alongside Windows Hello for Business for managed-device scenarios. A second update is editorial, changing the page date and normalizing markup.

• Intune · General

  Passwordless guidance adds Microsoft Entra passkey on Windows

  The revised Intune guidance describes Microsoft Entra passkey on Windows as a FIDO2 passkey that uses Windows Hello for biometric verification without device join or registration. Users can register multiple passkeys for multiple Microsoft Entra accounts on one device, making the scenario relevant to shared devices and unmanaged endpoints. The page also clarifies that it complements Windows Hello for Business on managed devices; this is documentation content, not evidence of a new Intune launch.

• Intune · General

  Passwordless page metadata is dated 13 April 2026

  The companion update changes the page's ms.date from 03/24/2026 to 04/13/2026. The remaining diff only normalizes column and row markup, with no changed setting, prerequisite, procedure, or administrator behavior shown.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.