No More Separate Passkeys: Windows 11 Adds API for Password Manager Integration

Microsoft has announced that Windows 11 now includes new APIs to let password-manager applications integrate directly with the system, allowing users to store and use passkeys from their manager instead of a separate system-level passkey. Previously, each device stored a single passkey and sign-ins invoked a device-bound credential, with login sometimes routed through a browser extension if the passkey was in a password manager.

With the November 2025 update, the first applications able to handle system passkey operations are 1Password and Bitwarden, meaning users can authenticate using passkeys stored in their manager after installation. The login experience still shows the Windows Hello prompt, but verification is indicated as being performed via the password manager.

The feature is still in testing, and Microsoft notes potential issues such as failed authentication or unsuccessful invocations that will need further refinement with password-manager developers. 13 November 2025.