Microsoft and Google are pushing passkeys and hardware security keys deeper into workplace authentication, with Microsoft preparing to make passkeys the default authentication experience in Entra ID, and Google adding FIDO2-compliant security keys as a second factor in the Windows login process for Google Workspace users.
The announcements, both made Monday, represent different but related steps in the technology industry’s effort to move organizations away from passwords, texted verification codes, and other credentials that can be stolen, intercepted, or surrendered to a convincing phishing site.
