Where passkeys work
To add one, see Sign in with a passkey.
| Windows | Linux | Android | |
|---|---|---|---|
| Windows Hello | yes (Edge, Chrome, Firefox) | ||
| Another phone, by QR code | yes (Chrome, Edge) | yes (Chrome, with Bluetooth) | yes (Android’s passkey sheet) |
| A security key (USB or NFC) | yes | yes | yes |
| A password manager’s passkeys | if its browser extension offers them | the same | if it’s set as a passkey provider in Android’s settings |
| This phone’s screen lock | through the phone’s passkey provider (Google Password Manager needs a Google account on the phone) |
The iPhone app doesn’t offer passkeys.
What’s been tested
Section titled “What’s been tested”The server was tested with a software authenticator, the desktop app end to end with headless Chromium and its virtual authenticator, and the Android app on an emulator up to Android’s passkey sheet and back. No real Windows Hello, phone screen lock, password manager or security key has been used with Sternway’s passkeys yet.
- A team that requires single sign-on refuses passkey sign-in for its members. They sign in with SSO.
- A team’s “Require two-factor” rule still means an authenticator app.
- Owners see
account.passkey.added,account.passkey.removedandaccount.passkey.usedfor members in the audit log.
© 2026 IRONPINE LABS LLC
ALL RIGHTS RESERVED.