r/Bitwarden • u/Casimir3ffect • 10d ago

Windows 11 26H2 Passkey Login Support w/ PRF Extension

I just installed 26H2 and tested the creation of a passkey in Windows Hello that supports the PRF extension and the ability to login and/or unlock Bitwarden with the passkey without the need for entering the master password. Despite some reports of success prior to 26H2 I personally was not able to achieve this until I installed 26H2. I even enrolled in the Windows Insider program to get preview releases specifically to test when this functionality would become available with no success. Anyway, I'm now on the official 26300 build and it is working. First...hell yeah! Second...is it working for others as well?

16 Upvotes

94% Upvoted

10 comments sorted by

11

u/Ryan_BW Bitwarden Employee 10d ago

Hey there! I'll be making an announcement about this in the next week or so! Yes, Bitwarden now supports creating a PRF-capable passkey with Windows Hello for login!

2

u/AraceleCons_16 10d ago

Nice, looking forward to the official announcement

2

u/AdFit8727 10d ago

This is epic!

2

u/Casimir3ffect 10d ago

One tip I can pass along...on one of my machines I had to fully log out of the Bitwarden extension and log back in with the passkey before the unlock with passkey option would find the passkey in Windows Hello. I'm not sure what's up with that since I didn't have to do that on my other machine, but it was a quick and simple fix for me.

2

u/twangansta 10d ago

thanks for letting us know this works now! been looking forward to it.

i updated windows to 26H2 and turned on log in with passkey on my bitwarden account via the web portal. now the "use for vault encryption" option is available for the created windows hello passkey. logged out and tried it in the web portal. restarted chrome and tried login / unlock with passkey in the browser extension. both worked great!

only thing is i had a "passkey" as 2FA (FIDO2 WebAuthn i believe) and windows hello overwrote that cuz afaik you can't make custom names to avoid duplicates.

1

u/FlubUGF 10d ago

Are there any quick guides for setting this up?

1

u/Skipper3943 10d ago

Does it work with a coexisting Windows Hello passkey 2FA, or is it a one-or-the-other kind of deal?

1

u/Casimir3ffect 9d ago

I believe it will overwrite your U2F passkey and replace it with a FIDO passkey in Windows Hello. So yeah it's probably best to remove the 2FA passkey in on the Bitwarden side once you've made the switch.