How can I to disable 'iPhone, iPad, or Android device' for passkeys on Corporate devices?

Question

How can I disable the option to use an 'iPhone, iPad, or Android device' as a passkey in Windows 11 Enterprise? It is a serious problem that Windows is suggesting that users violate company policy by connecting/pairing a personally-owned device to a company-owned PC.

Answer 1

Hi Steven,

I’m following up to check whether the issue has been resolved. Feel free to reply if you need further information. If the information provided was helpful, please click "Accept Answer" to help others in the community. Thank you!

Answer 2

Hi Steven,

By default, Windows 11 Enterprise may show options to use an iPhone, iPad, or Android device as a passkey, but you can control this behavior through policy settings.

The most effective way to disable these options is by using Group Policy or Mobile Device Management (MDM) tools such as Intune. Specifically, you’ll want to configure the Authentication Policies to block passkey sign‑in methods that rely on external devices. In Group Policy, this can be done under Computer Configuration > Administrative Templates > Windows Components > Windows Hello for Business, where you can disable “Use companion devices for authentication.”

I hope the response provided some helpful insight. If it clarified the issue for you, please consider marking it as Accept Answer so others with the same issue can find the solution.

Jason.