Accounts Enable or Disable Passkey Managers in Windows 11

This tutorial will show you how to turn on or off passkey managers available to save passkeys to for your account in Windows 11.

Passkeys provide a more secure and convenient method to logging into websites and applications compared to passwords. Unlike passwords, which users must remember and type, passkeys are stored as secrets on a device and can use a device's unlock mechanism (such as biometrics or a PIN). Passkeys can be used without the need for other sign-in challenges, making the authentication process faster, secure, and more convenient.

You can use passkeys with any applications or websites that support them, to create and sign in with Windows Hello. Once a passkey is created and saved with Windows Hello, you can use your device's biometrics or PIN to sign in. Alternatively, you can use a companion device (phone or tablet) to sign in.

Windows 11 now has seamless passkey manager integration. This means you can use your passkey credential manager of choice such as 1Password or Bitwarden to use passkeys in Windows. You can turn this on via Settings > Accounts > Passkeys > Advanced options. Once you turn this on, you will need to complete user verification using Windows Hello (through biometric authentication using face recognition or fingerprint, or with a PIN). Once verified, you can use your existing passkeys saved in your passkey credential manager or save new passkeys – and your passkeys are protected by Windows Hello.

Passkeys are phish-resistant, less vulnerable to data breaches, and easier and faster to use than passwords. With plugin passkey manager support, you get:

• Choice and flexibility: Use your preferred passkey manager natively on Windows.
• Easy authentication: Create and sign in with passkeys using Windows Hello.
• Passkeys everywhere: Your passkeys are synced between your Windows PCs and mobile devices. They go where you go.

With plugin passkey manager support, packaged credential managers can integrate directly into Windows. You can save, manage, and use passkeys across browsers and native apps — thanks to the new plugin provider capability.

If you install a 3rd party passkey manager (ex: 1Password or Bitwarden), you will be able to turn on or off saving passkeys to your Windows device. If you don't have a 3rd party passkey manager installed, then you will only be able to save passkeys to your Windows device.

When you turn on passkey managers, they will be available to save your passkeys to.

References:





EXAMPLE: Choose passkey manager for where to save your passkey for a site or app







1 Open Settings (Win+I).

2 Click/tap on Accounts on the left side, and click/tap on Passkeys on the right side. (see screenshot below)



3 Click/tap on Advanced options. (see screenshot below)


4 Turn on (default) or off available passkey managers you want. (see screenshot below)

If you do not have a 3rd party passkey manager installed and turned on, then the Save passkeys to this Windows device passkey manager will be turned on and grayed out.

If you do have a 3rd party passkey manager installed and turned on, then you will be able to turn on or off the Save passkeys to this Windows device passkey manager.

5 If you turned on a passkey manager (ex: 1Password or Bitwarden), you will be prompted by Windows Security to verify with your Windows Hello sign-in options. (see screenshot below)


6 When finished, you can close Settings if you like.

This option will only work if you have a 3rd party passkey manager turned on in Option One.

1 Do step 2 (enable) or step 3 (disable) below for what you would like to do.

This is the default setting.

(Contents of REG file for reference)





(Contents of REG file for reference)

4 Save the .reg file to your desktop.

5 If you have Smart App Control turned on, you will need to unblock the downloaded REG file.

6 Double click/tap on the downloaded .reg file to merge it.

7 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

8 You can now delete the downloaded .reg file if you like.


That's it,
Shawn Brink