Passkeys - New Device


Caledon Ken

Well-known member
Power User
VIP
Local time
9:27 PM
Posts
818
Location
Toronto, Canada
OS
Windows 11 Pro x64 Version V23H2
I'm about to set up a new device on Windows 11. We created a new MS account to use for this purposes. Microsoft is enforcing the use of Passkeys on new accounts so old machine has the passkey to log in with.

My question, how do I initiate machine login (OOBE) when I don't have passkey on new device to sign in with? The new device does NOT have a web cam nor does the old machine.
 

My Computer

System One

  • OS
    Windows 11 Pro x64 Version V23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom
    CPU
    i7-8700K
    Motherboard
    Asus Maximus X Code - Z370
    Memory
    G.Skill Trident Z 3200MHz F4-3200C16D-16GTZ (2) 32GB
    Graphics Card(s)
    Intel UHD Graphics 630
    Sound Card
    Integrated ROG SupremeFX
    Monitor(s) Displays
    Asus VP279 27", Samsung BX2431 24"
    Screen Resolution
    1920 x 1080
    Hard Drives
    Samsung M.2 NVMe 960 EVO 500GB Boot,
    Samsung 840 EVO 250GB (System Copy Drive),
    Samsung 860 EVO 1TB (Primary Data Drive),
    WD Black 500GB (Data Copy Drive)
    ICY Dock 5.25 2.5/3.5 Bays MB971SP-B
    PSU
    Corsair RM 650i +Gold
    Case
    Phanteks Enthroo Primo
    Cooling
    Corsair Hydro H150i, 360mm Rad & Five Corsair 140mm Pro ML Case Fans
    Keyboard
    das Keyboard MX Brown Mechanical Switches Model DASKMKPROSIL-3G7-r1.0
    Mouse
    Logitech MX Master 3 Wireless & Bluetooth
    Internet Speed
    500Mb +
    Browser
    Chrome (Pri), Firefox (Sec)
    Antivirus
    Malwarebytes Premium, SuperAntiSpyware Pro (Licensed)
    Other Info
    Microsoft LifeCam HD,
    APC Back-UPS Pro 1500,
    Macrium (Licensed),
    Microsoft 365,
    Wise Disk Cleaner,
    Crystal Disk Info,
    Screenpresso (Licensed),
    AnyDesk (Licensed),
It's best to have a passkey setup on your phone and/or a physical passkey such as a yubikey. You can use those types of passkeys during the OOBE
 

My Computer

System One

  • OS
    Linux Mint
    Computer type
    Laptop
    Manufacturer/Model
    System76 Lemur Pro
Thanks. This person doesn't own a yubikey, about $50 cdn.

How would I use passkey on phone to set up new computer. I can request QR code on phone but do not have a webcam to scan in.

I really don't think MS put an ounce of thought into how to set up a new machine with passkey on another device, potentially a device that may not even be bootable.
 

My Computer

System One

  • OS
    Windows 11 Pro x64 Version V23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom
    CPU
    i7-8700K
    Motherboard
    Asus Maximus X Code - Z370
    Memory
    G.Skill Trident Z 3200MHz F4-3200C16D-16GTZ (2) 32GB
    Graphics Card(s)
    Intel UHD Graphics 630
    Sound Card
    Integrated ROG SupremeFX
    Monitor(s) Displays
    Asus VP279 27", Samsung BX2431 24"
    Screen Resolution
    1920 x 1080
    Hard Drives
    Samsung M.2 NVMe 960 EVO 500GB Boot,
    Samsung 840 EVO 250GB (System Copy Drive),
    Samsung 860 EVO 1TB (Primary Data Drive),
    WD Black 500GB (Data Copy Drive)
    ICY Dock 5.25 2.5/3.5 Bays MB971SP-B
    PSU
    Corsair RM 650i +Gold
    Case
    Phanteks Enthroo Primo
    Cooling
    Corsair Hydro H150i, 360mm Rad & Five Corsair 140mm Pro ML Case Fans
    Keyboard
    das Keyboard MX Brown Mechanical Switches Model DASKMKPROSIL-3G7-r1.0
    Mouse
    Logitech MX Master 3 Wireless & Bluetooth
    Internet Speed
    500Mb +
    Browser
    Chrome (Pri), Firefox (Sec)
    Antivirus
    Malwarebytes Premium, SuperAntiSpyware Pro (Licensed)
    Other Info
    Microsoft LifeCam HD,
    APC Back-UPS Pro 1500,
    Macrium (Licensed),
    Microsoft 365,
    Wise Disk Cleaner,
    Crystal Disk Info,
    Screenpresso (Licensed),
    AnyDesk (Licensed),
When the phone is the passkey you scan the QR that's displayed on the computer from the phone
 

My Computer

System One

  • OS
    Linux Mint
    Computer type
    Laptop
    Manufacturer/Model
    System76 Lemur Pro
Besides passkeys, a person can set up the MS authenticator on their phone. When setting up a Microsoft account on the MS Authenticator, you can still enter a password, as well as the code (from another authenticator app or from the recovery phone/email). You can add the MS Authenticator (Send sign-in notification) on the old computer as a way to verify identity on the account (https://account.live.com/proofs/manage/additional). After that, you can approve logins using the MS Authenticator.

This is convenient (it will work for setting up a new Windows login linked to the MS account), but note that in the long run, if the account is hacked, the MS Authenticator may become a liability. If an account is hacked, one of the first things to do is to remove the authenticator as a way to log in.
 

My Computer

System One

  • OS
    Windows 11 Pro 24H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Optiplex Micro 5000
    CPU
    Intel Core i5-12500T
    Motherboard
    Dell 03V7GF
    Memory
    2 x 8GB DDR4 SO-DIMM 3200
    Graphics Card(s)
    Intel UHD Graphics 770
    Sound Card
    Intel Alder Lake-S PCH - cAVS (Audio, Voice, Speech)
    Internet Speed
    100/1,000 Mbps
    Browser
    Firefox ESR
    Antivirus
    Windows defender. ConfigureDefender. One-time free scanners: ESET, Emsisosft, Sophos.
Thank you. So I created a new account and it asked for password, no mention of passkeys. I thought all new accounts were forced.

I thank you for the responses.

I'll be back.
 

My Computer

System One

  • OS
    Windows 11 Pro x64 Version V23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom
    CPU
    i7-8700K
    Motherboard
    Asus Maximus X Code - Z370
    Memory
    G.Skill Trident Z 3200MHz F4-3200C16D-16GTZ (2) 32GB
    Graphics Card(s)
    Intel UHD Graphics 630
    Sound Card
    Integrated ROG SupremeFX
    Monitor(s) Displays
    Asus VP279 27", Samsung BX2431 24"
    Screen Resolution
    1920 x 1080
    Hard Drives
    Samsung M.2 NVMe 960 EVO 500GB Boot,
    Samsung 840 EVO 250GB (System Copy Drive),
    Samsung 860 EVO 1TB (Primary Data Drive),
    WD Black 500GB (Data Copy Drive)
    ICY Dock 5.25 2.5/3.5 Bays MB971SP-B
    PSU
    Corsair RM 650i +Gold
    Case
    Phanteks Enthroo Primo
    Cooling
    Corsair Hydro H150i, 360mm Rad & Five Corsair 140mm Pro ML Case Fans
    Keyboard
    das Keyboard MX Brown Mechanical Switches Model DASKMKPROSIL-3G7-r1.0
    Mouse
    Logitech MX Master 3 Wireless & Bluetooth
    Internet Speed
    500Mb +
    Browser
    Chrome (Pri), Firefox (Sec)
    Antivirus
    Malwarebytes Premium, SuperAntiSpyware Pro (Licensed)
    Other Info
    Microsoft LifeCam HD,
    APC Back-UPS Pro 1500,
    Macrium (Licensed),
    Microsoft 365,
    Wise Disk Cleaner,
    Crystal Disk Info,
    Screenpresso (Licensed),
    AnyDesk (Licensed),

Latest Support Threads

Back
Top Bottom