Integrating Passkeys into Enterprise Stacks & Windows 11 without Windows Hello - This Week at Passkeys

Integrating Passkeys into Enterprise Stacks - Windows 11 without Windows Hello

What a Week!

♟️ Integrating Passkeys into Enterprise Stack (Enterprise Passkeys Guide 4)

💪 Use Windows 11 Without Windows Hello / Microsoft Account

Here are this week’s topics that you don’t wanna miss out on!

---

In retroperspective, it's insane.

Remember when we used hardware TAN generators not too long ago to approve an online transaction?

I still remember my first steps.

It was one of the first things I set up when I turned 18.

Online banking.

No more hassle of going to a branch just for a single money transfer.

I knew online banking had been but even my parents still did most of their banking in the branch back then.

When looking further into banking auth, it’s fascinating to see how the industry has changed and where we are today.

Security has improved. Customer experience has been enhanced.

The first online banks relied on printed lists of single-use TANs. Revolutonary but flawed system, vulnerable to theft and misuse.

Then, SMS OTPs emerged, providing better security by tying auth to a user’s device. However, despite their convenience, SMS OTPs quickly proved vulnerable to phishing and interception (still crazy that they’re still so widely used today).

Banks responded by introducing hardware TAN generators. Insert the card into the device. Enter the PIN. Press several buttons just to get a 10+ digit number - for a small money transfer.

The friction was insane.

Then, with the rise of smartphones and biometric auth, banking became simpler.

However, customers now had to manage multiple devices and banking apps, each with different setup processes.

Passkeys are the next step in this evolution.

They eliminate the risk of phishing - one of the biggest fraud concerns for banks today.

Their UX is unparalleled (no need to install a native app).

In the end, the most convenient solution always wins.

Some regions will adopt passkeys sooner (e.g. USA, Australia or Southeast Asia) - while others, like Europe, will lag behind.

The EBA still hasn’t taken a clear stance on passkeys and risk-averse European banks tend to focus on potential problems rather than solutions.

However, the industry should be outcome-driven: synced passkeys provide superior security compared to today’s phishing-prone authentication methods.

That’s why PayPal, with the largest payment-based passkey experience, is going all-in on passkeys - outside of Europe.

My prediction? Once the first major bank implements passkeys, it will trigger a ripple effect across the industry. I’m already aware of several banks planning their rollouts (see this banking passkeys FAQ).

Notably, challenger banks (e.g. Revolut, Finom or Ubank) have already adopted passkeys - without waiting for explicit PSD2 regulatory guidelines. Their proactive approach proves that real security is about protecting customers, not just meeting compliance requirements. Traditional banks should take note: they need to engage with regulators, adopt best practices & plan a seamless transition for their users.

In 5 years, passkeys will be the standard login for online banking.

Then, we'll look back at today’s authentication methods the same way we now see hardware TAN generators.

---

Integrating Passkeys into Your Enterprise Stack: What You Need to Know

Passkeys are changing authentication for enterprises - but how do you integrate them into your existing systems without breaking everything? This guide breaks down key areas: from adding passkeys to your website and authentication flows to integrating with customer support, security and analytics tools. Whether you’re dealing with complex authentication systems or just starting, seamless passkey adoption is possible with the right approach. But what’s the biggest challenge enterprises face when implementing passkeys?

---

Can You Use Windows 11 Without Windows Hello or a Microsoft Account?

Windows 11 is packed with security features, but what happens if you don’t want to use Windows Hello or a Microsoft account? Turns out, you can still use passkeys - but with some limitations. This article breaks down how local accounts work with passkeys, whether Windows Hello is a must-have and what happens when you try passkey authentication without Microsoft’s built-in ecosystem. Plus, there's a game-changer coming in 2025 that might change everything. Curious?

---

Join the Passkeys Community!

Our mission is to free the world from passwords to make the Internet a safer place - this can only be accomplished together.
Join our passkeys community on Slack to connect with other passkeys enthusiasts, stay up-to-date in the passkeys world, get implementation support and show your passkeys projects!