#Passkeys in Microsoft #Authenticator will be generally available in mid-January 2025! With the general availability of passkeys in Microsoft Authenticator, the need to have key restrictions set to use passkeys in Microsoft Authenticator will disappear. So, by mid-January, passkeys will become a fully functional phishing-resistant authentication option equivalent to physical #FIDO2 keys. Attestation is already supported now, and in mid-January the preview phase will disappear and support without key restrictions will come. Conversely, if you don't want to support passkeys in Microsoft Authenticator for some reason, you'll need to implement key restrictions and start actively blocking iOS and Android apps. If you plan to allow users to sign in with passkeys in Microsoft Authenticator, you don't need to do anything and it will be fully functional by mid-January. And if you have conditional access policies that require passkey/FIDO2, users will automatically be prompted to register passkeys in Microsoft Authenticator. Details can be found directly in the Microsoft 365 Message Center mc.merill.net/message/MC9203…