Where passkeys work

To add one, see Sign in with a passkey.

	Windows	Linux	Android
Windows Hello	yes (Edge, Chrome, Firefox)
Another phone, by QR code	yes (Chrome, Edge)	yes (Chrome, with Bluetooth)	yes (Android’s passkey sheet)
A security key (USB or NFC)	yes	yes	yes
A password manager’s passkeys	if its browser extension offers them	the same	if it’s set as a passkey provider in Android’s settings
This phone’s screen lock			through the phone’s passkey provider (Google Password Manager needs a Google account on the phone)

The iPhone app doesn’t offer passkeys.

What’s been tested

The server was tested with a software authenticator, the desktop app end to end with headless Chromium and its virtual authenticator, and the Android app on an emulator up to Android’s passkey sheet and back. No real Windows Hello, phone screen lock, password manager or security key has been used with Sternway’s passkeys yet.

Teams

• A team that requires single sign-on refuses passkey sign-in for its members. They sign in with SSO.
• A team’s “Require two-factor” rule still means an authenticator app.
• Owners see account.passkey.added, account.passkey.removed and account.passkey.used for members in the audit log.