SECURITY Signal 411
Microsoft Entra Passkeys Reach GA for Both Device Bound and Synced Types
↗
Microsoft Entra now has both Device Bound and Synced passkeys in general availability, offering phishing-resistant authentication that satisfies MFA requirements through the WebAuthn protocol.
Passkeys eliminate the phishing vector that passwords expose, since the credential is bound to the service's domain and cannot be replayed. For organizations using Entra, this provides a native passwordless option that also satisfies MFA, and device-bound FIDO2 keys can enforce Authentication Strength policies on high-privilege role elevation.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
Both Device Bound and Synced passkeys are now in GA for Microsoft Entra.
Passkeys satisfy MFA by combining device possession with a local biometric or PIN unlock.
Device Bound passkeys create separate key pairs per device, so a lost device requires registering a new passkey.
THE CLUSTER