Hey everyone! I've been dealing with a security breach on our email accounts even with Microsoft Authenticator in place, and I'm exploring the option of using Passkeys to better secure our accounts. I've never worked with Passkeys before, and I've hit a wall trying to set one up. I attempted to register a Passkey from my AD joined Windows PC and wanted to save it to my iPhone. When I name it (it defaults to 'iCloud Keychain') and hit Next, I get an error saying: **Passkey not registered - We couldn't register this passkey.** It seems to save on my phone, but it doesn't appear as an option for signing into my M365 account, plus I'm on iOS 18.5. I've tried various computers, browsers, and accounts to no avail. On top of that, I'm struggling with Windows Hello—do I need it for this? What am I doing wrong? Any tips?
2 Answers
Make sure that your iCloud Keychain is synced correctly! Sometimes resetting it can help. You might also want to verify your M365 account settings.
Currently, the only passkeys that Microsoft Entra supports are those bound to hardware devices like FIDO2 or Yubikey, or stored in the Microsoft Authenticator app. Unfortunately, Passkeys can’t be stored in iCloud, which is probably why you're running into issues.
I had to enable the Authenticator as a password provider on my iPhone, but even that didn't solve my issue. Check it out here: [link](https://www.reddit.com/r/sysadmin/comments/1kssilk/passkey_not_registered_microsoft_authenticator/)
That's good to know! Seems like they don't make these limitations very clear.