Entra lets passkey users change passwords without the old one

Entra lets passkey users change passwords without the old one

7 October 2026: Microsoft Entra is adding a way for people to change their password in My Sign-Ins without typing the current one, provided they prove who they are with a strong credential such as a passkey or a FIDO2 security key. Message Center post MC1437671, first published on 23 July 2026 and updated on 7 October, puts the rollout at mid-October 2026, with completion expected in late October.

Not yet independently verified. Single source: the merill.net archive of the Microsoft 365 Message Center post. We have not read the original in the admin center, and Microsoft can still revise the dates. We will update this when it can be confirmed, and remove this note.

The people it helps are users who hold a registered strong credential, including Windows Hello for Business, and who still keep a password for apps or sign-in paths that need one. Until now a forgotten or leaked password has meant a reset flow or a call to the help desk. Under the new option they can authenticate with the passkey and set a new password directly.

The post says no action is required, and the feature is disabled by default. The detail administrators should read is the scope: "The setting is tenant-wide," so an organisation can turn it on for everyone or leave it off for everyone, with no way to limit it to certain users or groups.

That makes it a policy choice rather than a pilot. Organisations that have rolled passkeys out to only part of the workforce, or that still rely on password reset approval for audit purposes, should decide before the rollout reaches them whether a tenant-wide switch fits. Support teams will want updated guidance on the new flow.

Microsoft says the setting arrives off, so nothing changes for a tenant until an administrator enables it in the Entra admin interfaces.

Related on TrustList:

• GKE drops Identity Service at version 1.37

Sources

• Microsoft 365 Message Center archive (merill.net): MC1437671 Microsoft Entra: Authenticated password change in My Sign-Ins, 7 October 2026