Passkeys Usage

A Windows Hello PIN is only the way to unlock a passkey that is stored on the Windows device. It is not itself a separate passkey type.

If a site is asking for a hardware device, that usually means the site is prompting for a passkey stored on a security key or on another device, instead of a passkey saved on This Windows device.

What to do:

1. On the sign-in prompt, look for an option such as Choose a different passkey, Use another device, or Security key.
2. Select the option that uses This Windows device if it is available.
3. If the site already has a passkey registered from a security key, phone, or tablet, create a new passkey for that site and save it on This Windows device.
4. In Windows 11, check Settings > Accounts > Passkeys to manage passkeys saved with Windows Hello.
5. If the site only supports passkeys from a hardware security key or another device, use the site’s alternative sign-in method instead.

Important distinction:

• Windows Hello PIN / face / fingerprint = unlock method
• Passkey location = where the passkey is stored: This Windows device, iPhone, iPad or Android device, Linked device, or Security key

So the fix is usually to register the passkey again for that site and make sure it is saved to This Windows device rather than to a hardware key or phone.

• Support for passkeys in Windows
• Passwordless sign-in
• Where are passkeys stored on my machine? - Microsoft Q&A
• Windows Security has hijacked my attempt to apply a Passcode - Microsoft Q&A