Comment by Gigachad

5 days ago

That actually works too. The PC shows a QR code you scan with your phone which negotiates the login. Doesn't require signing in with anything on the PC first.

I do this with my work laptop where the passkeys are stored on my personal phone.

Which service/website shows a QR code? I don't get one when signing on via Entra to one of customer environments that we manage.

Background: the Entra login used to work fine with password + MS Athenticator notification, but recently it forced me to set up a passkey using MS Authenticator (on my phone)... which was all well and good, except that there's no way for me to actually pass the passkey to Entra, so I end up clicking things multiple times (login using other means, selecting password, selecting how I wish to MFA, selecting Authenticator notification etc).. All it did was significantly increase my login times and fallback to password logins.

So I'm not sure how I'm supposed to log in with the passkey, there's no QR code or anything.

  • It's part of the OS. The browser calls the API and macos or windows will show the QR code to scan. In theory Linux will get this in the future but I suspect like most things it will take a while.

    • I'm using Edge and Windows 26H2, and logging in via a Microsoft authentication system. There is no QR code.

      This is why passkey are a failure, no one knows how they work, and even one someone claims they know, the reality is often different.

      2 replies →

This doesn't work if the device you want to login on doesn't have Bluetooth.

  • If you work in some hyper secure business that has custom laptops without bluetooth then you should use usb keys or any other of the ways to use passkeys without the phone method.

    • I’ve run into this issue multiple times, no custom hardware involved. Just virtual machines that didn’t support Bluetooth, and physically distant computers I was controlling remotely.