The error “We couldn’t create a passkey” usually means the passkey could not be properly registered on the authentication server, even if the sign-in with ID and password worked.
Try these steps in order:
- Delete any partially created passkey in Microsoft Authenticator
- Open Microsoft Authenticator on the mobile device.
- Find any passkey that was created for this account during previous attempts.
- Tap the Trash icon and confirm Delete.
- This removes the locally stored passkey that never finished registering.
- Retry passkey registration
- Go back to the device where the passkey is being set up (for example, via My Security info or Advanced Security Options, depending on whether this is a personal or work/school account).
- Start the passkey setup again and follow the prompts.
- If using cross-device registration (for example, Android + another device):
- Ensure Bluetooth is enabled on both devices.
- Keep both devices in range and connected to the internet.
- When the security window opens on the mobile device, complete the prompts to save the passkey.
- If the error persists
- The documentation notes that this error can occur if the passkey provider is not permitted or the connection times out during registration.
- After deleting the local passkey from Authenticator, repeat the registration once more. If it still fails, contact support for further investigation, as some restrictions may be enforced by the organization or environment.
If instead you see a message that the passkey can no longer be used or is not found after creation, delete any invalid passkeys from the authenticator app and your account, then set up a new passkey.
References: