For many years, Microsoft has offered the possibility to reliably protect accesses from takeovers using multi-factor authentication (MFA) and Fast Identity Online (FIDO). In addition to MFA and FIDO2, Microsoft has recently started offering authentication using certificates in Azure AD. With FIDO Passkey, passwordless authentication can even be realised in Azure AD.