Windows 11 Passkey Sign In Missing for Microsoft Account: Fix

You try to sign in to your Microsoft account on Windows 11 using a passkey, but the option is missing. Passkeys let you sign in with your face, fingerprint, or PIN instead of a password. This feature relies on Windows Hello being properly configured and the Microsoft account being linked to the device. In this article, you will learn why the passkey option disappears and how to restore it.

Why the Passkey Option Disappears for Your Microsoft Account

Passkeys are a password replacement technology built on the FIDO2 standard. On Windows 11, they rely on the Windows Hello subsystem to create and store a cryptographic key pair on the device. When you attempt to add a passkey to your Microsoft account, the system checks two conditions: Windows Hello must be fully set up, and your Microsoft account must be linked as the primary account on the device.

The most common root cause is that Windows Hello is either not configured, partially configured, or has been disabled by a Group Policy or a recent update. A second cause is that the Microsoft account you are trying to use is not the primary account signed into Windows. If you have a local account or a work/school account active, the passkey option may be hidden. A third cause is that the account itself lacks the required security verification, such as a confirmed phone number or recovery email.

Steps to Fix the Missing Passkey Option

Follow these steps in order. After each step, check whether the passkey option appears in your Microsoft account security settings at account.microsoft.com/security.

Step 1: Verify Windows Hello Is Fully Configured

1. Open Settings
   Press Win + I to open Settings. Go to Accounts > Sign-in options.
2. Check Windows Hello status
   Look under the Windows Hello section. You should see either Face recognition, Fingerprint recognition, or PIN (Windows Hello) with a status of Ready or Set up. If any of these show Not set up, click the Set up button and follow the prompts. You must complete at least one Windows Hello method.
3. Remove and re-add PIN if needed
   If Windows Hello is already set up but passkeys still do not appear, remove the PIN by clicking PIN (Windows Hello), then Remove. Restart the computer, return to the same page, and set up a new PIN. This refreshes the Windows Hello container where passkeys are stored.

Step 2: Confirm You Are Signed In With the Correct Microsoft Account

1. Open Settings
   Press Win + I and go to Accounts > Your info.
2. Check account type
   Under Account settings, you should see your Microsoft account email address. If you see Local account, you are not signed in with a Microsoft account. Click Sign in with a Microsoft account instead and enter your credentials.
3. Switch to your personal Microsoft account
   If you have a work or school account connected, Windows may prioritize that account. Go to Accounts > Access work or school. If you see a work or school account listed, click on it and select Disconnect. Restart the computer and check for passkeys again.

Step 3: Verify Your Microsoft Account Security Info

1. Open your Microsoft account online
   Go to account.microsoft.com/security and sign in.
2. Check security info
   Under Security info, ensure you have at least one verified phone number or recovery email. If not, click Add security info and follow the prompts.
3. Update security preferences
   Click Advanced security options. Under Additional security options, make sure Passwordless account is turned Off for now. If it is On, the account may hide the passkey option because it expects only passwordless methods. You can turn it back On after the passkey is added.

Step 4: Update Windows 11 and Drivers

1. Check for Windows updates
   Press Win + I and go to Windows Update > Check for updates. Install any pending updates and restart.
2. Update biometric drivers
   Press Win + X and select Device Manager. Expand Biometric devices. Right-click your device (e.g., Intel Integrated Sensor Solution) and select Update driver > Search automatically for drivers. If no update is found, check your PC manufacturer’s website for the latest driver.

If the Passkey Option Still Does Not Appear

Passkey Option Missing After a Windows Update on Windows 11

A recent Windows update may have reset Windows Hello settings or disabled passkey support. Open Settings > Windows Update > Update history > Uninstall updates. Look for the most recent update and uninstall it. Restart and check for passkeys. If the option returns, pause updates for a few days and watch for a fix.

Passkey Option Missing on a Work or School Managed Device

If your device is enrolled in an organization, Group Policy may block passkey creation. Open Settings > Accounts > Access work or school. Click the organization name and select Info. Look for policies that say Disable FIDO2 security key or Disable Windows Hello. You will need to contact your IT admin to change these policies.

Passkey Option Missing on a Virtual Machine

Windows running inside a virtual machine often lacks the TPM (Trusted Platform Module) 2.0 requirement for passkeys. Ensure the VM has a virtual TPM enabled. In Hyper-V, go to VM settings and enable Trusted Platform Module. In VMware Workstation, go to VM > Settings > Options > Advanced > TPM and add a TPM module.

Windows Hello vs Passkey: Authentication Feature Comparison

Item	Windows Hello	Passkey
Purpose	Sign in to the Windows device	Sign in to websites and apps
Storage location	Device TPM or software container	Device TPM or cloud sync
Requires Microsoft account	No, works with local accounts	Yes, must be linked to the account
Can be used across devices	No, tied to one device	Yes, if synced with Microsoft account
Can be disabled by Group Policy	Yes	Yes

Passkeys depend on a working Windows Hello installation. If Windows Hello is broken or missing, passkeys will not appear as a sign-in option for your Microsoft account.

You can now restore the passkey option by verifying Windows Hello, switching to the correct Microsoft account, and confirming your account security info. If the issue persists, check for recent updates or Group Policy restrictions. As an advanced tip, you can force a refresh of the Windows Hello container by deleting the ngc folder in C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc after backing up your PIN, then setting up Windows Hello again from scratch.