Passkeys are supposed to make juggling numerous logins easier, but they’re tied to your device. Now, Microsoft is letting you sync passkeys in the cloud. The big question is whether you should do it or not.

Microsoft Passkeys Sync Via Edge

If you already use the Microsoft Password Manager in Edge, you may already be storing your passkeys in this password manager. This is different than two-factor authentication. However, Microsoft introduced a new option to sync your passwords between the Microsoft Password Manager in Edge on different Windows devices.

Now, if your passkeys were originally tied to your desktop PC, you can sync them with your laptop. No need to authenticate your account using the original device.

This solves a major issue with passkeys. When they’re tied to a specific device, you always need that device to authenticate your login. Yes, it’s more secure since websites never store your password. Plus, the private cryptographic key is stored locally on your device, keeping it safe from hackers. Even if a website is compromised, your data is still secure since the website never has the private key.

With Microsoft letting you sync passkeys in the cloud, all you have to do is authenticate new devices using your unique Microsoft Password Manager PIN. Then, all your passkeys are available to use on that device as well.

Now, if you lose your device or it suddenly crashes, you just have to know your PIN to sync to a new device. No need to keep up with a list of recovery codes to access your accounts.

Simple Requirements But Limited Availability

Microsoft often complicates requirements for new features, but all you need is a Microsoft account, Windows 10 or higher, and Microsoft Edge version 142 or higher. Open Edge, click the three dot menu and select Help and feedback -> About Microsoft Edge. This shows you your version number and lets you check for updates.

If you don’t have Edge 142 yet, Microsoft is performing a gradual release, so it may be a few weeks before all users have access. This works much like major Windows system updates that roll out in batches versus all users at once.

All of this integrates with Windows Hello. If you’re already set that up, you’ll be able to use your PIN or biometric login in Edge.

The downside is the ability to sync passkeys in the cloud is limited to Windows devices currently. Even if you use the Edge browser on your Android phone or macOS device, you can’t sync your passkeys.

That makes it rather inconvenient if you tend to login to sites more often on other operating systems. However, Microsoft has stated they plan to roll out this ability to other systems in the near future.

The other downside is your passkeys are only available in Edge, not any other browsers/apps on Windows. Microsoft plans to release a Microsoft Password Manager plugin to provide compatibility across apps on your Windows device.

Setup Passkey Syncing in Edge

Visit any site in the Edge browser that accepts passkeys. I’m using Gmail as an example. When prompted, click Continue to set up a passkey.

You’ll then be prompted to set up a Microsoft Password Manager PIN if you haven’t already done so. Make sure you don’t lose access to this PIN or you won’t be able to sync passkeys in the cloud.

The good news is you can reset your PIN by going to opening Edge, opening hte three dot menu at the top right and selecting Settings -> Passwords and autofill -> Microsoft Password Manager -> Settings. You must do this on a device that you’ve already synced your passkeys to.

Now, when you open Edge on a different Windows device, use your Microsoft Password Manager PIN to sync your passkeys. Then, log in to any site you’ve created a passkey for using your preferred login method, such as a PIN or biometrics.

Should You Sync Passkeys in the Cloud?

Syncing solves the problem of having everything tied to a single device. If your device fails or it’s lost or stolen, everything’s gone. Unless you have your recovery codes handy, which most users typically don’t, you’ll have to try and remember your original usernames and passwords or lose your accounts completely.

The downside is this creates several security issues. The simplest is you’ll need to remember not only the login method you use for your passkeys, but the additional PIN for the Microsoft Password Manager. You only get 10 attempts or the password manager locks you out.

Also, anyone with access to your device while you’re logged in could reset your Microsoft Password Manager PIN. If they’ve also compromised your Microsoft account, they could gain access to your passkeys. Always lock your PC when you’re not using it, or enable Dynamic Lock.

The more worrisome threat is your passkeys aren’t tied to a single device any longer. Anyone who gains access to your Microsoft Password Manager PIN and your Microsoft account could sync your passkeys. If you’re not using biometrics to login, this could leave your account vulnerable.

Of course, the most obvious issue is compatibility. Syncing is great, but when it’s limited to just Windows desktop devices and the Edge browser, there’s not much of a point.

It’s still easier and more secure to simply keep track of your recovery codes. This is especially true if you already use passkeys on another device or with another password manager. I suggest storing your codes on a dedicated USB drive designed for private files.