Set up a synced passkey in Apple Passwords or Google Password Manager, then use your phone to sign in to your Microsoft work or school account—including from a Windows PC or Mac.
iPhone / iPadAndroidWindows / Mac sign-inA passkey is a secure sign-in credential protected by your device’s screen lock. Instead of typing your Microsoft account password, you approve the sign-in using Face ID, Touch ID, fingerprint, or your device PIN/passcode. A synced passkey is encrypted and synchronized by a supported provider, such as Apple Passwords (iCloud Keychain) or Google Password Manager.
Important distinction: Your Microsoft work or school account remains separate from your personal Apple Account or Google Account. The Apple/Google service stores the passkey; it does not replace your Microsoft account or sign in to Microsoft on your behalf.
Choose the phone and password manager where you want the new passkey saved.
On your iPhone, enable iCloud Keychain: Settings → your name → iCloud → Passwords (or Passwords & Keychain) → Sync this iPhone. Then go to Settings → General → AutoFill & Passwords and select Passwords under “Set Up Codes In.” Keep a device passcode and Face ID / Touch ID configured where available.
On that iPhone, visit mysignins.microsoft.com/security-info and sign in to your work or school account using your existing method. Complete any required MFA challenge.
Select “+ Add sign-in method,” choose “Passkey,” and select “Next.” This is different from “Passkey in Microsoft Authenticator.”
Follow the iPhone’s operating-system prompt. Choose Apple Passwords/iCloud Keychain if asked, select “Next” as prompted, and approve using Face ID, Touch ID, or your device passcode. The specific sheet varies with iOS and browser.
Give the passkey a recognizable name (for example, “Work iPhone”), select “Next,” then “Done.” Confirm the new passkey appears in Microsoft Security info.
On your Android phone, enable a screen lock and make sure you are signed in to the intended Google Account. Find Settings → Security and privacy → More security settings → Passwords, passkeys, and autofill (device wording varies), then select Google Password Manager as the passkey provider.
On the Android phone, visit mysignins.microsoft.com/security-info and sign in to your work or school account. Complete the existing MFA prompt if requested.
Choose “+ Add sign-in method” → “Passkey” → “Next.” Do not choose the separate Microsoft Authenticator passkey registration option.
When Android offers a passkey, select Google Password Manager if presented, then “Continue.” Confirm using your phone’s fingerprint, face unlock, or PIN/pattern/password. Device/vendor screens vary.
Enter a recognizable name (for example, “Work Android”), select “Next,” then “Done.” Confirm the passkey is listed in Microsoft Security info.
This is cross-device passkey sign-in. It works even when your computer does not have the passkey locally. Keep your phone close to the computer.
On a Windows PC or Mac, open the Microsoft app or website and start signing in with your work or school account.
If needed, choose “Sign-in options” → “Face, fingerprint, PIN or security key.” Choose the option for a phone or tablet / passkey from another device. Wording differs across Edge, Chrome, Windows and macOS.
Choose “iPhone, iPad, or Android device.” Your computer displays a QR code. On the phone containing your passkey, scan it with the camera. Keep Bluetooth and internet access enabled on both devices and the phone nearby.
On iPhone select “Sign in with passkey”; on Android select “Use passkey to sign in.” Unlock the phone using its supported biometric or screen-lock method. Complete any additional organizational prompt if requested.
After verification, your computer completes the work or school account sign-in without entering that account’s password.
QR illustration: The graphic above is intentionally non-scannable; the real QR code appears only during your actual sign-in. Never scan an unexpected sign-in QR code or approve a sign-in you did not initiate.
When the passkey is already available on the device you are using, no cross-device QR code is needed.
On the phone containing your passkey—or a compatible device where it has synchronized—open a Microsoft work or school app or web sign-in page.
Choose the offered passkey for your account. If you do not see it, enter your username and proceed, or choose the passkey option under alternative sign-in methods.
Confirm with Face ID, Touch ID, fingerprint, or the applicable PIN/passcode. Complete any additional challenge your organization requests.
You are signed in without typing your Microsoft account password.
| Saved in | Native or supported use | Windows sign-in with phone |
|---|---|---|
| Apple Passwords / iCloud Keychain | iPhone / iPad (iOS 16+); Mac (macOS 13+) | Yes — choose another device, scan QR and approve with iPhone |
| Google Password Manager | Android 9+ (device/vendor exceptions); Chrome on supported desktop platforms; Chrome on iOS 17+ | Yes — use an Android phone to scan and approve |
Provider availability and browser behavior depend on platform, OS version and device manufacturer. A passkey stored in Apple Passwords does not automatically become a native Windows passkey; cross-device authentication is the documented path.
Security: Your biometric data stays on your device. Do not share your phone unlock code. Synced passkeys are phishing resistant but, unlike attested device-bound authenticators, synced passkeys do not provide device attestation to Entra ID. Organizations may require additional controls for privileged users. Keep an approved recovery sign-in method until your passkey has been tested.
Instructions reviewed against the following vendor documentation on 5 November 2026. For changes to operating-system prompts or administrator policy, the vendor documentation remains authoritative.