58
Microsoft is killing SMS codes for Microsoft account sign-in, aggressively pushes passkeys on Windows 11
(www.windowslatest.com)
this post was submitted on 19 May 2026
58 points (100.0% liked)
PC Master Race
21167 readers
603 users here now
A community for PC Master Race.
Rules:
- No bigotry: Including racism, sexism, homophobia, transphobia, or xenophobia. Code of Conduct.
- Be respectful. Everyone should feel welcome here.
- No NSFW content.
- No Ads / Spamming.
- Be thoughtful and helpful: especially when new beginners have questions.
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
the extra work this will no-doubt create for me might pay the rent for a couple months. but still, i'd rather it be opt-in, not forced upon users or them being tricked into it.
Passkeys are objectively better. They close the phishing attack vector. Depending on the site they remove the need to use a password at all. Different sites do different things.
I think most people do not like them because the default is to let your OS store them, device locked, in a TPM.
More password managers need to support them. I store all mine in Bitwarden although given what seems to be going on there I don’t think I can recommend them anymore.
a password, and the concept, are also easier to comprehend. passkeys for most is just fairy dust and magic.
another consideration is something you have or something you are are different from something you know. phishing and hackers or scammers are not the only dangers to protect yourself from.
My passkeys are stored on my phone, I just scan a QR code and they’re sent over to the PC for that login. I’ve never seen the default on Windows be anything but this.
Yeah I need to check out vaultwarden. Huge disappointment as its been a great product, but I'm not liking where the recent website changes are heading.
Not really comparable. Passkeys don't replace 2FA. You need to bootstrap passkeys with 2FA.
Google allows for them to be used for 2FA.
You can use them for the password also which I didn't know. You have to choose sign in another way to get the option.
That's after you already have a passkey. I don't think you can create a passkey without a different form of 2FA. At least...you shouldn't be able to, because that would kind of defeat the purpose.