Security Key Archives

Winsage

March 5, 2026

Bitwarden now lets users log into Windows 11 using passkeys

Bitwarden has introduced a feature that allows Windows 11 users to log in using passkeys stored in their vaults, enhancing security by enabling phishing-resistant authentication at the operating system's login screen. Users can authenticate by scanning a QR code displayed on the Windows screen with the Bitwarden app on their mobile device, which verifies access to the stored passkey. This feature requires the Windows device to be joined to Microsoft Entra ID and for the organization to enable FIDO2 security key sign-in. Users must also register a passkey for their Entra ID profile stored in Bitwarden. The integration aims to improve security against cyber attacks targeting operating system authentication. Microsoft plans to roll out this passkey-based Windows login feature in March, depending on the organization's Microsoft Entra ID configuration, and it will be available across all Bitwarden plans, including the free tier.

Winsage

November 30, 2025

Can’t See Passworrd Icon in Lock screen Sign-in Options? Microsoft Says KB5064081 is to Blame

The password sign-in icon on the Windows 11 lock screen may be missing due to a bug confirmed by Microsoft, which arose after the August 2025 non-security preview update (KB5064081) or subsequent updates for Windows 11 versions 24H2 and 25H2. Users can still access their accounts by hovering over the blank area where the icon usually appears, which will reveal the password sign-in option. Clicking this area brings up the password text field for standard sign-in. The only current workaround is to use this "invisible button" method. Microsoft is aware of the issue and is working on a fix, but no timeline has been provided.

Winsage

November 27, 2025

Microsoft Security Keys May Require PIN After Recent Windows Updates

Microsoft announced an update for FIDO2 security keys on Windows 11, introducing a new prompt for users to set up a PIN during authentication. The rollout began with preview update KB5065789 on September 29, 2025, for OS Builds 26200.6725 and 26100.6725, and was completed with security update KB5068861 on November 11, 2025, for OS Builds 26200.7171 and 26100.7171. This update affects sign-ins where a Relying Party (RP) or Identity Provider (IDP) requests User Verification set to “Preferred” for keys without a PIN, in accordance with WebAuthn specifications. Users must now set up a PIN during authentication flows, not just during registration. To avoid PIN prompts, RPs or IDPs can set “userVerification” to “discouraged.” There is no option to roll back the changes.

Winsage

November 27, 2025

Microsoft Security Keys May Require a PIN After Recent Windows Updates

Microsoft has updated Windows to require users to create and configure a PIN for FIDO2 security keys during sign-in, even if they did not set one during initial registration. This requirement applies to users who install the Windows preview update released on September 29, 2025 (KB5065789, OS Builds 26200.6725 and 26100.6725) or later updates. The necessity for a PIN is triggered when a Relying Party (RP) or Identity Provider (IDP) requests User Verification set to “Preferred.” The update aims to ensure compliance with WebAuthn specifications and began rolling out gradually on Windows 11 devices after the September 29, 2025 update, with full deployment completed by the November 11, 2025 security update (KB5068861, OS Builds 26200.7171 and 26100.7171). Windows now supports three verification settings: Discouraged, Preferred, and Required, with “Preferred” indicating that user verification should occur if supported by the authenticator.

Winsage

November 26, 2025

Microsoft: Security keys may prompt for PIN after recent updates

Microsoft issued a notice to users about a new behavior related to FIDO2 security keys following Windows updates since the September 2025 preview update. This change affects devices on Windows 11 versions 24H2 or 25H2, where users may be prompted to enter a PIN during authentication. The adjustment aligns with WebAuthn specifications, which outline protocols for authentication methods, including PINs and biometrics. User verification can be categorized as discouraged, preferred, or required, with "preferred" necessitating a PIN setup if supported by the authenticator. The rollout began after the KB5065789 preview update and was completed with the November KB5068861 security update. Microsoft stated that after installing the September 29, 2025 update, users might need to create a PIN to sign in with a security key, even if it was not required during initial registration. This behavior occurs when a Relying Party or Identity Provider requests User Verification = Preferred during authentication with a FIDO2 security key lacking a PIN. Organizations can opt to adjust the user verification setting to "discouraged" if they do not want to require users to create or enter PINs. FIDO2 security keys enable passwordless authentication by requiring the physical presence of a USB, NFC, or Bluetooth token, gaining popularity as organizations seek to reduce risks associated with traditional passwords.

AppWizard

November 12, 2025

Facing trouble logging into X? You’re not alone

X users are experiencing login issues due to a verification loop affecting both app and website access. A YubiKey re-enrollment is required by November 10, which is causing access problems for some users. Despite these issues, most users remain unaffected, and X engineers are working to restore service. Reports indicate a spike in login issues around 1:30 PM ET, particularly in the US and Canada. Users have encountered difficulties with account verification processes, including receiving or accepting verification codes. The ongoing transition to a new domain may be contributing to complications with two-factor authentication.

Winsage

August 23, 2025

Microsoft is still slowly chipping away at the Control Panel in Windows 11

Microsoft is gradually transitioning settings from the Control Panel to the Settings app in Windows 11, as seen in the latest Insider Preview Build 27928. This update includes new features such as the ability to add additional clocks, change time servers, and adjust date and time formatting within the Settings app. Users can also modify number and currency formats and enable Unicode UTF-8 for language support. The Control Panel continues to exist alongside the Settings app, with no clear timeline for the completion of the migration process. A fix was implemented for a crash issue in the Settings app related to adding a security key.

Winsage

July 25, 2025

Find forgotten Wi-Fi passwords, SSIDs in Windows and Android

Windows laptops can retrieve the Wi-Fi password for the current network by searching for "View Network Connections," right-clicking the active connection, selecting Status, and then clicking on Wireless Properties to view the password under the Security tab. For older networks, users can open a command prompt and type "netsh wlan show profile" to see saved Wi-Fi profiles, then use "netsh wlan show profile [NETWORK NAME] key=clear" to reveal the password in plain text. On Android devices, users can view stored Wi-Fi SSIDs and passwords by accessing the quick settings menu, tapping the current network name for the password, or navigating to Saved networks for other networks. Verification may be required to share the password, which can be displayed alongside a QR code for easy sharing.

AppWizard

May 30, 2025

Android 16 beta testers get a look at its Advanced Protection security bastion

Google is rolling out the Advanced Protection feature for Pixel devices enrolled in the Android 16 QPR1 Beta 1 program, which includes browsing safeguards, app protections, and USB transfer restrictions. This feature aims to enhance device security and protect against online threats. The Advanced Protection Program was originally launched for users at risk of data breaches and was expanded last year to include passkeys and a simplified enrollment process. Additionally, an "Intrusion Detection" feature was noted, designed to log user activity for suspicious behavior. The Android 16 QPR1 Beta 1 update was released on May 20, 2025, and introduced a new design language called Material 3 Expressive.

AppWizard

May 28, 2025

The best password managers for Android of 2025: Expert tested

Safeguarding personal information like login credentials and credit card details is crucial for Android users, and a password manager is essential for generating and securely storing strong, unique passwords. Bitwarden is highlighted as the best free password manager due to its open-source nature and robust encryption, allowing unlimited credential syncing across devices. It features autofill, secure note storage, a password generator, encrypted sharing, biometric unlock, and passkey support. 1Password is recommended for its user-friendly interface and security features, offering a library of over 20 credential types, autofill capabilities, and a feature called Watchtower for security alerts. It requires a subscription after a 14-day trial. Keeper is noted for its user-friendly onboarding process and enterprise-level security, accommodating various record types and offering features like account recovery and offline access, but it may be less appealing for budget-conscious users. Proton Pass, an open-source option from the creators of Proton VPN and Proton Mail, emphasizes privacy and offers features like password health alerts and hide-my-email aliases, although it currently lacks some functionalities of more established managers. Overall, Bitwarden is the top choice for cost-effective password management, while 1Password is recognized for its user experience.