Three ways to enable passwordless authentication in Azure

There are three methods to enable Microsoft's passwordless authentication. Each method covers a specific need and all three can also be used together. 

1. Windows Hello for Business

This method is suitable for those dedicated to Windows. It allows you to log into the computer with biometric recognition (facial and fingerprint), or a PIN code that is transmitted to a network for security reasons. 

You can find more details on how to enable Windows Hello for Business on Microsoft's websites.

2. FIDO2 (Fast Identity Online) security keys

This is suitable for those logging into a shared machine, working in environments where phones are restricted, or working for very important identities. 

FIDO2 security keys are USB devices that are inserted into a machine for biometric and PIN authentication. Read this documentation to learn how to enable the security keys.

3. Microsoft Authenticator app

Unlike the first two methods, you can achieve the same security and availability with the Authenticator app – without investing heavily in external hardware. This is because the app can be installed on any mobile device. 

With the Authenticator app, users can log on to any platform by matching the number on the screen and in the app. After the number is matched, a biometric method and/or PIN code is used for confirmation. If you do not use the Authenticator app, you can learn more about how to get started here.