From afd095df52697832f832c3cc358f321e0e123625 Mon Sep 17 00:00:00 2001 From: Ben Hutchison Date: Wed, 13 Mar 2024 19:44:56 -0700 Subject: [PATCH] Add verbatim symptom text to readme so it's easier for people to search for --- AuthenticatorChooser/AuthenticatorChooser.csproj | 2 +- Readme.md | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/AuthenticatorChooser/AuthenticatorChooser.csproj b/AuthenticatorChooser/AuthenticatorChooser.csproj index 4c0dfa1..a1f8720 100644 --- a/AuthenticatorChooser/AuthenticatorChooser.csproj +++ b/AuthenticatorChooser/AuthenticatorChooser.csproj @@ -7,7 +7,7 @@ enable enable app.manifest - 0.0.0 + 0.0.1 Ben Hutchison © 2024 $(Authors) $(Authors) diff --git a/Readme.md b/Readme.md index c5aeb0b..3b99bc2 100644 --- a/Readme.md +++ b/Readme.md @@ -3,7 +3,7 @@ [![Build status](https://img.shields.io/github/actions/workflow/status/Aldaviva/AuthenticatorChooser/dotnet.yml?branch=master&logo=github)](https://github.com/Aldaviva/AuthenticatorChooser/actions/workflows/dotnet.yml) -*Program that runs in the background to automatically skip the Bluetooth smartphone option in Windows 11 passkey prompts and go straight to the USB security key option.* +*Program that runs in the background to automatically skip the Windows "Sign in with your passkey" prompt and go straight to the USB security key option.* @@ -22,9 +22,9 @@ In Windows 10 and 11 prior to 22H2 Moment 4 (September 2023), if the TPM contain

usb security key prompt

-In Windows 11 [22H2 Moment 4](https://www.bleepingcomputer.com/news/microsoft/windows-11-moment-4-update-released-here-are-the-many-new-features/) (September 2023) and later (including [23H2](https://www.bleepingcomputer.com/news/microsoft/windows-11-23h2-new-features-in-the-windows-11-2023-update/)), this behavior changed to include the ability to pair with Android and iOS devices over Bluetooth to use their passkeys, which somewhat ameliorates the problem of passkeys not being portable outside their TPM. The behavior is unchanged if the Windows TPM contains the passkey. However, if the local TPM does not contain the passkey, an additional step was added before you can use your USB security key. +In Windows 11 [22H2 Moment 4](https://www.bleepingcomputer.com/news/microsoft/windows-11-moment-4-update-released-here-are-the-many-new-features/) (September 2023) and later (including [23H2](https://www.bleepingcomputer.com/news/microsoft/windows-11-23h2-new-features-in-the-windows-11-2023-update/)), this behavior changed to include the ability to pair with Android and iOS devices over Bluetooth to use their passkeys, which somewhat ameliorates the problem of passkeys not being portable outside their TPM. The behavior is unchanged if the Windows TPM contains the passkey. However, if the local TPM does not contain the passkey, an additional "Sign in with your passkey" step was added before you can use your USB security key. -Now you have to choose whether you want to use a smartphone or USB security key, and smartphone is the default choice. Choosing the USB security key requires two additional clicks or four additional keystrokes. It is impossible to opt out of this new prompt, even if you disable Bluetooth, don't have an Android or iOS device, or never want to use it for FIDO authentication on your Windows computer. Windows does not remember the most recently used authenticator, either. You could disable your Bluetooth device in Device Manager, but this will also prevent you from using any other Bluetooth peripherals with your computer, such as mice, keyboards, headphones, speakers, and tracker tags. +Now it says "To sign in to “`domain`”, choose a device with a saved passkey," and you have to choose whether you want to use an "iPhone, iPad, or Android device" or a "Security key," and smartphone is the default choice. Choosing the USB security key requires two additional clicks or four additional keystrokes. It is impossible to opt out of this new prompt, even if you disable Bluetooth, don't have an Android or iOS device, or never want to use it for FIDO authentication on your Windows computer. Windows does not remember the most recently used authenticator, either. You could disable your Bluetooth device in Device Manager, but this will also prevent you from using any other Bluetooth peripherals with your computer, such as mice, keyboards, headphones, speakers, and tracker tags.

authenticator prompt