Phishing-resistant passkeys enable secure login directly to the Windows desktop

SANTA BARBARA, Calif.: Bitwarden, the trusted leader in password, passkey, and secrets management, today announced support for logging into Windows using passkeys stored in the Bitwarden vault. The new capability enables phishing-resistant authentication directly to Windows 11 devices, extending passwordless access from browsers and applications into the operating system login experience.

Windows now supports industry-standard passkeys secured in the Bitwarden vault, enabling passwordless authentication during sign-in. Users can choose to log in with a passkey stored in the Bitwarden vault, allowing Windows to authenticate using cryptographic credentials rather than passwords, without transmitting shared secrets. In supported configurations, the Windows login process presents a QR code that can be scanned with a mobile device to confirm access to a passkey stored in the Bitwarden vault, enabling passwordless login while maintaining centralized policy and administrative controls.

This integration extends passkey authentication into the Windows sign-in flow, covering one of the most critical points of access on the device.

Building broader, more secure coverage for passwordless authentication

Operating system login remains a high-value target for attackers, as compromised credentials or a stolen device can provide immediate access to files, applications, and enterprise resources before additional security controls are applied. By replacing shared secrets with phishing-resistant, device-bound authentication tied to the user, device, and origin, passkeys reduce the risk of both remote compromise and physical device loss at the earliest point of access.

Passkeys are now widely supported across websites, browsers, and applications. Operating system authentication has been more dependent on traditional credentials. By enabling passkey login at the Windows desktop, Bitwarden closes a critical gap between application authentication and device access, supporting a more consistent passwordless experience across everyday computing environments and helping users and organizations strengthen security at the system level.

"Microsoft is committed to making passwordless authentication practical and secure across Windows to help reduce the risk of phishing and password theft,” said Katharine Holdsworth, Partner Group Product Manager, Microsoft. “With the Bitwarden vault integrated into Windows Hello, using passkeys stored in the Bitwarden vault is a fast, smooth, and secure experience across both websites and apps on Windows.”

Availability and cross-platform adoption

Passkey-based Windows login is available on compatible Windows 11 devices using passkeys stored in the Bitwarden vault, including environments supported by Microsoft Entra ID. This capability builds on existing native passkey integration in Windows 11 and ongoing passkey innovation across operating systems, browsers, and devices. Bitwarden continues to advance passwordless authentication through open standards and broad platform support, ensuring passkeys remain portable, interoperable, and accessible across platforms.

For more information about logging into Windows with a Bitwarden passkey, please visit: https://bitwarden.com/blog/log-into-windows-with-a-bitwarden-passkey

About Bitwarden

Bitwarden equips enterprises and individuals with the power to securely manage and share information online with trusted open source security solutions. With a password manager for everyone, users can easily manage their entire online identity anywhere. Bitwarden Secrets Manager and Passwordless.dev enhance developer secrets security and streamline passkey development for end users and workforce authentication. Founded in 2016, Bitwarden serves over 50,000 businesses and more than 10 million users worldwide across 180 countries in 50+ languages. The company is headquartered in Santa Barbara, California. Learn more at bitwarden.com.

Fonte: Business Wire