Microsoft Account Asking for a Passkey You Never Set Up? Fix It

Your Microsoft account or Outlook sign-in stops on a screen asking for a passkey. You never set one up, or you don't remember doing it. Your password is right there in your head, and Microsoft will not take it.

This happens more often since Microsoft started pushing passkeys as the default sign-in method for personal accounts. The fix takes about five minutes once you know where the password option hides.

Why does Microsoft ask for a passkey I never created?

Your account has a passkey saved, or it is set to passwordless. Either one makes the sign-in page lead with a passkey prompt.

A passkey is a login credential stored on a device instead of a typed password. Microsoft supports them on Windows Hello, on phones through the Microsoft Authenticator app, on security keys, and in password managers such as iCloud Keychain and Google Password Manager. Many people create one without noticing, because the setup is a single approval on a phone or a fingerprint scan during an earlier sign-in.

Three common causes:

• You approved a "Create a passkey" prompt in Outlook, on Windows, or on your phone in the past few months.
• Someone with access to your device or account created one.
• Your account has Passwordless account switched on, which removes the password from the normal sign-in flow.

If you did not create the passkey and nobody you trust did, treat it as a security problem. The last section covers what to check.

How do I sign in with my password instead?

Select Other ways to sign in on the passkey screen, then choose Use my password. The exact wording changes between the browser, the Outlook app, and Windows, but the option sits under the same link.

Follow these steps:

1. Start the sign-in at outlook.com or account.microsoft.com and enter your email address.
2. When the passkey prompt appears, close any system dialog asking for a fingerprint, PIN, or QR code scan.
3. Select Other ways to sign in, or Sign-in options on some screens.
4. Choose Use my password, then type it.
5. Approve any verification code sent to your phone or email.

If the password option is missing from the list, your account is fully passwordless. Use another listed method, such as a code sent to your phone or an approval in Microsoft Authenticator. Then follow the next section to bring the password back.

How do I turn off passwordless sign-in?

Sign in with any working method, open your security settings, and switch Passwordless account to off. Microsoft then accepts your password again.

1. Go to account.microsoft.com/security and sign in.
2. Select Advanced security options.
3. Find Passwordless account and select Turn off.
4. Confirm the change. Microsoft asks you to set a password if the account does not have one.

Passwordless accounts have no password on file. If you turn the setting off, you choose a new password during this step. Pick one you don't use anywhere else, and save it in a password manager.

The path is also reachable through Security, then Manage how I sign in. Microsoft moves menu items around, so if you don't see the exact label, look for the sign-in methods list on the Security page.

How do I remove a passkey from my Microsoft account?

Open the sign-in methods list under your security settings, select the passkey, and choose Remove. Do this for any passkey you don't recognize or no longer use.

1. Sign in at account.microsoft.com/security.
2. Select Manage how I sign in.
3. Look at the list of passkeys. Each shows a device or credential manager name.
4. Select Remove next to the entry you want gone, then confirm.

Removing a passkey does not lock you out while you have a password or another verification method on the account. Make sure your recovery email and phone number are current before you delete anything. If they are out of date, update them first.

What do the passkey error messages mean?

Microsoft shows a few specific errors when a passkey attempt fails. Each points to a different cause.

• "Something went wrong." Credential managers store one passkey per service. A second attempt from the same manager fails. Other causes are a timeout, Bluetooth turned off during a phone-based sign-in, or an operating system without full passkey support. Update your device, then try again.
• "No passkeys available." Your device has no screen lock set up. Turn on a PIN, fingerprint, or face unlock in your device settings. Passkeys need one.
• The "no longer" passkey error. You deleted the passkey from the account or the device, or you changed your PIN or biometric. Set up a new passkey, and delete the old entry from your account.
• "We couldn't use your device to verify your identity." The passkey is not valid on this device anymore. Sign in another way, then remove the dead passkey from your account.
• The QR code does not show. Bluetooth is off on one of the two devices, the devices are too far apart, one has no internet connection, or your organization blocks the feature. Turn Bluetooth on for both devices and hold them close together.

Why does Outlook keep asking for a passkey after I use my password?

Outlook keeps offering a passkey when the account still has one saved and the app has no record of your preferred method. Clear the saved credentials and sign in again.

On Windows 11, try this order:

1. Close Outlook fully. Check Task Manager for OUTLOOK.EXE or olk.exe and end any leftover process.
2. Open Settings, then Accounts, then Email & accounts. Remove the affected Microsoft account from the list.
3. Open Control Panel, then Credential Manager, then Windows Credentials. Remove entries starting with MicrosoftOffice16 or MicrosoftAccount.
4. Restart the PC.
5. Open Outlook, add the account back, and choose Other ways to sign in if the passkey prompt appears again.

On a Mac, open Keychain Access, search for Microsoft, and delete the saved Outlook and Office entries. Then reopen Outlook and sign in.

If the prompt returns after every launch, check the passkey list on your security page. A passkey tied to a device you no longer own keeps triggering the prompt until you remove it.

What if I did not create the passkey myself?

Change your password now and review your account activity. An unknown passkey means someone else signed in and added a method of their own.

1. Sign in with your password or another verified method.
2. Select Change password on the Security page and choose a new one.
3. Open Recent activity and review the sign-ins. Look for locations and devices you don't recognize, then select This wasn't me on those entries.
4. Remove unknown passkeys and unknown Authenticator entries under Manage how I sign in.
5. Confirm the recovery email and phone number belong to you.
6. Sign out of your devices and sign in again so old sessions end.

If you get blocked before step 1, use the account recovery form at account.live.com/acsr. Our guide on Microsoft account password recovery walks through the form field by field.

How do I stop this from happening again?

Decide on a sign-in method, then remove the ones you don't want. Keeping a password, one passkey on a device you own, and Microsoft Authenticator gives you a fallback if a single method fails.

Keep this checklist:

• Set one passkey on a device you use every day, and name it so you recognize it later.
• Keep a password saved in a password manager as the backup method.
• Keep your recovery email and phone number current.
• Save your account recovery code from the Security page in a safe place.
• Review the sign-in methods list once every few months.

Passkeys protect you against phishing better than passwords do, so removing them all is not the goal. Knowing exactly which ones exist on your account is. If you set one up on purpose, keep it. If you don't recognize it, remove it.

When should I contact Microsoft support?

Contact Microsoft when no method on the sign-in screen works, your recovery details are out of date, and the recovery form fails twice. Support verifies you through account details such as past email subjects and contacts, then restores access.

Have these ready before you start the recovery form:

• The email address of the account.
• A device and location you used for earlier sign-ins.
• Old passwords you remember.
• Subject lines of recent emails you sent.
• The names of a few contacts you write to often.

Fill in as many fields as you know. Vague answers are the most frequent reason the form rejects a request.