Windows 11 can require or offer passkeys in a few different ways. To reduce or remove passkey usage, adjust both the account’s sign-in methods and Windows passkey services.
- Manage passkeys for a Microsoft work or school account
If the requirement is coming from a Microsoft work or school account (for example, when signing into Microsoft 365 or Entra ID):
- Go to Security info at https://mysignins.microsoft.com/security-info.
- In the list of sign-in methods, find any Passkey or Passkey in Microsoft Authenticator entries.
- Select Delete for each passkey that should no longer be used.
- After that, remove the corresponding passkey from the device (see Windows steps below).
Note: If the organization enforces passkeys via policy, an admin must change that policy in Microsoft Entra; otherwise the requirement may return.
- Remove device-bound passkeys in Windows 11
To remove passkeys stored locally on the Windows device:
- Open Settings on Windows 11.
- Select Accounts > Passkeys.
- In the list of saved passkeys, locate the passkey entries that should be removed.
- Next to each one, select … (More) > Delete passkey.
This removes the device-bound passkey so it is no longer offered as a sign-in option from that device.
- Turn off Windows passkey services (to stop using/saving passkeys on the device)
To prevent Windows from offering or storing local passkeys:
- Open Settings.
- Go to Accounts > Passkeys > Advanced options.
- Turn off the option Save passkeys to this Windows device.
- If integrated third-party passkey managers are enabled and not desired, turn those off as well.
This reduces or removes Windows’ ability to use local passkeys, so other methods (password, PIN, etc.) are used instead.
If passkeys are enforced by an organization (for example, via Microsoft Entra FIDO2/passkey policy), an administrator must relax or change that policy; otherwise the requirement may persist even after local cleanup.
References: