Where Does Windows Store Passkeys?
Where Windows passkeys live, how to view them in Settings, and the TPM backing behind them.
Last updated
Windows passkeys managed locally sit behind Settings under Accounts and Passkeys. The page lists device bound entries with rename and remove actions. Advanced options toggle which providers Windows offers.
Device bound keys encrypt into the TPM and never export as plaintext. Synced managers (Microsoft, Google, Apple) roam through their own accounts with end to end encryption. Deleting the local entry kills sign in for that device only.
Where Windows stores this, by platform
Settings > Accounts > Passkeys
View and delete device bound passkeys here. Use Advanced options to allow saving to this device or third party managers. Organizations can disable the page by policy.
Frequently asked questions
How do I delete a Windows passkey?
Open Settings, Accounts, Passkeys. Pick More next to a device bound entry and Delete passkey. Synced manager copies must be removed at that provider instead.
How do I move passkeys to a new PC?
Sign into the synced manager account on the new PC (Microsoft, Google or Apple). Device bound TPM keys never roam, so create fresh ones there. Check Advanced options for provider toggles.
Notice an outdated path? Let us know.