What is a Passkey?
A Passkey is a passwordless, phishing-resistant way to sign in to your account. Instead of entering a password and approving a text message, you verify your identity using your device's built-in security features, such as Face ID, a fingerprint, Windows Hello, or your device PIN.
Why are Passkeys more secure?
Unlike passwords, Passkeys cannot be typed into a fake website or easily stolen through phishing attacks. They are designed to help protect against many of the most common account compromise methods used by cybercriminals.
Will I still need to remember my password?
For now, yes. However, the technology industry is moving toward a passwordless future where Passkeys become the primary way users sign in.
Will this only be used at work?
No. Passkeys are being adopted across the technology industry. Many banks, retailers, healthcare providers, social media platforms, and online services are implementing Passkey support. You will likely encounter Passkeys in both your professional and personal life over the coming years.
What happens if I get a new phone or computer?
Most Passkeys can be transferred to a new device through your device ecosystem (Apple, Google, or Microsoft) or re-registered when needed. If you replace a device and have difficulty signing in, the IT Service Desk can assist you.
Will IT be able to see my fingerprint or face scan?
No. Your biometric information remains on your device. Microsoft and Thompson Hospitality do not receive or store your fingerprint, facial image, or other biometric data. The device simply confirms that you have successfully verified your identity.
What if I don't want to use a fingerprint or facial recognition?
Most devices allow you to use a local device PIN instead. A Passkey does not require biometric authentication if you prefer another supported method.
What should I do if I receive a Passkey registration prompt?
We recommend completing the setup when prompted. The registration process is quick, improves account security, and prepares you for future authentication changes announced by Microsoft.