Particle.news
Download on the App Store

Windows 11 Rolls Out Native Passkey Manager Support With 1Password as First Plugin

The November security update lets users choose a system-level credential manager backed by hardware-protected cloud sync.

Overview

  • Microsoft made the passkey manager plugin API generally available in the Windows November 2025 security update, enabling a user-selectable default passkey manager.
  • Microsoft Password Manager is now integrated as a Windows plugin, syncing passkeys across Windows devices when signed into Edge with the same account and protected by a PIN and a cloud enclave.
  • 1Password is the first third-party provider to act as the system passkey manager, requiring the latest Windows 11 and the MSIX 1Password app with selection in Settings > Accounts > Passkeys > Advanced options.
  • Passkeys saved through Edge or native apps are available to other browsers and Windows applications via OS services, with Edge version 142+ already syncing passkeys on Windows 10 and 11.
  • Synced passkeys are safeguarded using Azure Managed HSMs, Azure Confidential Compute, and Confidential Ledger, with Microsoft targeting Edge on iOS by year-end and Android and macOS to follow while Linux timing remains unspecified.