[voidmain0001]

It just so happened that Microsoft sent an email today to our M365 tenant administrators that SMS and voice for 2FA is being removed 1-Feb-2027 and that automatic enrollment to passkeys starts 1-Sep-2026. Bring on the passkey overlords. Although, LLMs say that passkeys are superior to passwords since it includes a public/private key setup with the private key saved to a device that requires a PIN or biometric to access the private key.

[SirFatty]

That's if you're using Authenticator.

[josteink]

Clarification: Microsoft Authenticator.

You can’t use any random password-manager with passkey support.

I use Bitwarden for everything and have to have MS Authenticator installed just for this 1 login.

Super annoying.

[timmyc123]

You can use any credential manager you choose for Microsoft Account passkey.

[SirFatty]

I have Duo in our environment. Authenticator not required.

[voidmain0001]

The use of a passkey doesn’t require Authenticator or other OTP app. Gemini said that an OTP app can be used as a vault for the passkey, but it’s not the mechanism that permits the check of the private key. Rather, that’s the PIN or biometric. Now, perhaps I don’t understand your statement and you can clarify if that’s the case.

[pjc50]

How is one supposed to let an LLM log in with passkey?