Skip to main content

Use your face or finger to log into accounts using Microsoft Edge

how to factory reset windows
Image used with permission by copyright holder

Microsoft Edge now supports the Web Authentication specification for password-free logins. Support actually appeared in Build 17723 for Windows Insider Fast Ring participants and Build 18204 in the Skip Ahead program last week, but Microsoft didn’t mention the feature until this week’s report.

Recommended Videos

Already supported in Firefox and Google Chrome, it’s a means for signing into websites without the need for using a password. Once you create an account or set up two-factor authentication, it creates two encrypted tokens, one that resides on the website end (public) and one that resides on your end of the connection (private).

Thus, when you attempt to log into the account, the site sends a request for your private token. To do this, you would simply scan your finger, enter a PIN number, scan your face, or touch a USB-based security key like those sold by Yubico.

The big deal with Web Authentication is that there’s no stand-alone software installed on your PC that handles the private key. Instead, the exchange is handled by Microsoft Edge and a supporting website, thus there is nothing to hack to retrieve stored passwords. And in the case of Microsoft Edge, your password-free logins are tied into Windows Hello.

If you’re not familiar with Windows Hello, it’s Microsoft’s password-free platform for Windows 10. It supports fingerprint scanners and facial recognition — if your PC has the hardware — along with PIN numbers. For instance, all you need to do is look at the screen to log onto Windows 10 rather than type credentials on a keyboard if your PC supports facial recognition. Using Microsoft Edge, Windows 10 extends that capability to supporting websites.

“For websites that are not ready to move to a completely passwordless model, backwards compatibility with FIDO U2F devices can provide a strong second factor in addition to a password,” the company says. “We’re working with industry partners on lighting up the first passwordless experiences around the web.”

U2F stands for Universal 2nd Factor, an open-source authentication standard initially started by Google and Yubico along with NXP Semiconductors. It’s now maintained by the FIDO Alliance, a consortium that includes not only Google, Yubico and NXP, but also American Express, Bank of America, Intel, Lenovo, MasterCard, Microsoft, Qualcomm, Samsung, and many others.

Web Authentication, maintained by the World Wide Web Consortium (W3C), is a component that’s baked directly into web browsers and supports the U2F standard. If the website supports Web Authentication, then you won’t need a security code sent to you via SMS, nor will you need an app to grant access if you have two-factor authentication enabled. Even more, you won’t need to maintain a volume of different passwords but simply provide a face or a finger.

“We started this journey in 2016, when we shipped the industry’s first preview implementation of the Web Authentication API in Microsoft Edge,” Microsoft says. “Since then, we have been updating our implementation too as we worked with other vendors and the FIDO alliance to develop the standard.”

Passwords are an ancient technology, Microsoft says.

Kevin Parrish
Former Digital Trends Contributor
Kevin started taking PCs apart in the 90s when Quake was on the way and his PC lacked the required components. Since then…
6 Microsoft Edge shortcuts you need to try
The Microsoft Edge browser on a flat surface.

You're more than likely spending more time in your web browser these days. The good news is that, just like the keyboard shortcuts you can use on Windows or on MacOS, there are several shortcuts that can prove useful in the Microsoft Edge web browser.

These shortcuts can spare you from having to move your mouse around inside the web browser. There are a total of six that we really like, including editing the URL, getting to the settings menu, closing tabs, and so much more. Here's a deeper look at the six shortcuts you really need to try.
Alt + D to edit the URL

Read more
Microsoft Edge just got a new way to protect your privacy
Microsoft Edge Secure Network graphic.

Microsoft Edge just got even more secure. After a tease a few weeks ago, Microsoft has just officially announced the availability of Edge Secure Network, the new built-in VPN feature for the Microsoft Edge browser.

Though still in an experimental stage with a small audience using the Canary version of the browser, Microsoft hopes this feature can provide extra peace of mind when using Edge on unsecured networks. As with most other VPN services, this built-in Secure Network can mask your device's IP address, encrypt your data, and route it through a secure network that's geographically co-located.  This will make it harder for hackers and others with bad intent to see your true location. The company that provides your internet also won't be able to collect your browsing data for ads.

Read more
Microsoft Edge vs. Google Chrome: Performance, design, security, and more
Microsoft Edge browser on a computer screen.

Google Chrome remains the king of the web browsers, with around 65% share of the desktop browser market as of December 2024. Microsoft's Edge browser, which uses the Chromium open-source engine, is in a lower spot around 14%. Since Microsoft Edge was included as the default Windows browser, it has been given a slight -- well -- edge.

Which browser should you use? The two share a lot of similarities, but some key differences make one the clear winner.
Design

Read more