Blog Post
New user experience for consumer authentication
Hi Robin, great to see the improvements. One concern/question: with accounts that rely on passkeys instead of passwords, how will Microsoft's authentication system enable a spouse or other family member to gain access to a user's account in the event that the person becomes incapacitated or dies. In the ideal world, one would be able to designate a trusted spouse (or other family member) as being an alternative passkey holder. That would allow the spouse to use their own face to authenticate to the deceased or incapacitated family member's account if needed. Does Microsoft enable this, and if not, how is it handled? A solution that I think is too hard is to require the family member to have to prove the person is deceased or incapacitated, because that means contacting customer support and proving the person has died or has become incapacitated, proving you are the authorized spouse, etc.
Hi, thank you and great questionJoeC . It’s always rough to imagine what it would be like recovering all of a loved one’s digital life. Today MSA not only supports Windows Hello passkeys but also standard syncable passkeys that can be stored in a places like the iCloud Keychain and Google Wallet. And most devices require a PIN code before setting up a faceID. Microsoft accounts also still support generation of a personal backup security codes to recover an MSA. Agree that this continues to be a challenge.
- JoeCMar 28, 2025Copper Contributor
Thanks Robin Goldstein. Appreciate the quick response.