Browser support of FIDO2 passwordless authentication

Article
09/20/2023

Microsoft Entra ID allows FIDO2 security keys to be used as a passwordless device. The availability of FIDO2 authentication for Microsoft accounts was announced in 2018, and it became generally available in March 2021. The following diagram shows which browsers and operating system combinations support passwordless authentication using FIDO2 authentication keys with Microsoft Entra ID. Microsoft Entra ID currently supports only hardware FIDO2 keys and doesn't support passkeys for any platform.

Supported browsers

This table shows support for authenticating Microsoft Entra ID and Microsoft Accounts (MSA). Microsoft accounts are created by consumers for services such as Xbox, Skype, or Outlook.com.

OS	Chrome	Edge	Firefox	Safari
Windows	✅	✅	✅	N/A
macOS	✅	✅	✅	✅
ChromeOS	✅	N/A	N/A	N/A
Linux	✅	❌	❌	N/A
iOS	✅	✅	✅	✅
Android	❌	❌	❌	N/A

Note

This is the view for web support. Authentication for native apps in iOS and Android isn't available yet.

Browser support for each platform

The following tables show which transports are supported for each platform. Supported device types include USB, near-field communication (NFC), and bluetooth low energy (BLE).

Windows

Browser	USB	NFC	BLE
Edge	✅	✅	✅
Chrome	✅	✅	✅
Firefox	✅	✅	✅

macOS

Browser	USB	NFC¹	BLE¹
Edge	✅	N/A	N/A
Chrome	✅	N/A	N/A
Firefox²	✅	N/A	N/A
Safari²	✅	N/A	N/A

¹NFC and BLE security keys aren't supported on macOS by Apple.

²New security key registration doesn't work on these macOS browsers because they don't prompt to set up biometrics or PIN.

ChromeOS

Browser¹	USB	NFC	BLE
Chrome	✅	❌	❌

¹Security key registration isn't supported on ChromeOS or Chrome browser.

Linux

Browser	USB	NFC	BLE
Edge	❌	❌	❌
Chrome	✅	❌	❌
Firefox	✅	❌	❌

iOS

Browser¹	Lightning	NFC	BLE²
Edge	✅	✅	N/A
Chrome	✅	✅	N/A
Firefox	✅	✅	N/A
Safari	✅	✅	N/A

¹New security key registration doesn't work on iOS browsers because they don't prompt to set up biometrics or PIN.

²BLE security keys aren't supported on iOS by Apple.

Android

Browser¹	USB	NFC	BLE
Edge	❌	❌	❌
Chrome	❌	❌	❌
Firefox	❌	❌	❌

¹Security key biometrics or PIN for user verficiation isn't currently supported on Android by Google. Microsoft Entra ID requires user verification for all FIDO2 authentications.

Minimum browser version

The following are the minimum browser version requirements.

Browser	Minimum version
Chrome	76
Edge	Windows 10 version 1903¹
Firefox	66

¹All versions of the new Chromium-based Microsoft Edge support FIDO2. Support on Microsoft Edge legacy was added in 1903.

Next steps

Enable passwordless security key sign-in