Set Up a Synchronized Passkey on Entra ID to Make Credentials Phishing-Resistant and Portable Across Devices HTMD Blog

Let’s discuss Settings Synchronized Password on Entra ID to Make Credentials Phishing-Resistant and Portable Across Devices. At Ignite 2025, Microsoft announced just that Entra ID now supports Synchronized Password across multiple credential providers.

This new feature is on the way preview and that represents the next step passwordless authenticationbalance strong security with user convenience. This new feature makes Entra one of the first enterprise identity platforms to implement it.

With Synchronized Passkey Settings, users can authenticate with passkeys stored on cloud providers such as Apple iCloud Keychain, Google Password Manager, 1Password, and Bitwarden. As you know, Previously Entra only supported device-bound passkey (stored locally in the TPM or hardware security key).

Synchronized passkeys expand usability by leaving them alone credentials follow users across devices. The launch is part of Microsoft’s broader efforts passwordless strategy And Zero Trust Alignmentwhich aims to make secure login easier and scalable for companies.

Set Up a Synced Passkey on Entra ID to Make Credentials Phishing-Resistant and Portable Across Devices

With these new capabilities come credentials Phishing resistant and portable across devicessolving usability and recovery challenges. While they are improving comfort, organizations should evaluate trustworthiness of providers and implement Conditional Access policies to ensure compliance.

How to Set Synchronized Password on Entra ID

Here I will show a demo shown at the Ignite 2025 event by Nichole Peterson Senior Product Marketing Manager at Microsoft. Entered into Microsoft Entra admin center > Go to Authentication Methods > Policies > Password Lock (FIDO2).

Activate and Target

In this window you can see the option to Enable and Target Passkey. Here 2 options provided what is included and excluded. And here passkey profile is FIDO2 which is the default profile, Click on it.

Configure Passkey

In Configure Passkey tab, you can add a profile for passkey. Click the Add profile button and enter a Name and Target type for Passkey. Here the Name of the Synchronized Passkey and its Target type tied to the device, synced (preview). Then click on Keep knob.

Complete Sync Password Lock

After clicking Keep button, you will get a notification on the portal as saved authentication methods. The screenshot below shows the notification and Authentication method changes.

Need More Help or Have a Technical Question?

Join LinkedIn Page And Telegram Group to get step by step guides and latest news updates. Join us Meeting Page to participate in User group meetings. Also, Join WhatsApp Community to get the latest news about Microsoft Technologies. We were there reddit as well.

Author

Anoop C Nair has been a Microsoft MVP from 2015 onwards for 10 years in a row! He is a Workplace Solutions Architect with over 22+ years of experience in the Workplace technology space. He is also a Blogger, Speaker, and Local User Group Community leader. The main focus is on Device Management technologies such as SCCM and Intune. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security, Career, etc.