How To Clear Saved Sign-in Passkeys In Windows 11 Accounts Passkeys Settings

Method 1Managing Passkeys via Windows Settings

The primary graphical interface for handling your cryptographic sign-in methods is located inside the main Windows configuration panel. This method removes passkeys stored directly within the operating system’s credential manager.

1. Open Settings ⚙️ by pressing the Win+I.

   

2. Select Accounts from the left-hand navigation menu.
3. Click on Passkeys to open the dedicated management dashboard.

   

4. Locate the specific service or website whose credential you want to remove.
5. Click the three-dot menu icon next to the entry and select Delete passkey.
6. Confirm the prompt to permanently erase the cryptographic key from your hardware.

Method 2Removing Passkeys from Web Browsers

Many modern web browsers bypass the operating system store and save passkeys directly within their own encrypted profiles. If you cannot find a specific credential in the main Windows panel, your browser is likely holding it.

1. Open your web browser (such as Google Chrome, Microsoft Edge, or Mozilla Firefox).
2. Click the three-dot menu icon in the upper-right corner and select Settings.
3. Navigate to Autofill and passwords or Privacy and security depending on your browser.
4. Click on Passkeys or Passwords to open the credential manager.
5. Search for the account you want to target.
6. Click the delete or remove button associated with that specific entry.

Method 3Clearing Third-Party Password Manager Passkeys

If you use a third-party vault like Bitwarden, Dashlane, or 1Password to handle your logins, these applications often manage passkeys independently of Windows Hello. You must access the extension or desktop app to clear them.

1. Open your third-party password manager application or browser extension.
2. Unlock your vault using your master password or biometric prompt.
3. Search for the vault item corresponding to the service you want to clean up.
4. Edit the item entry to locate the stored passkey field.
5. Delete the passkey attachment or clear the credential data entirely.
6. Save the changes to sync the deletion across your connected devices.

Method 4Clearing Hardware Security Key Passkeys

Hardware security keys (such as FIDO2 USB tokens) store passkeys directly on the physical device itself. Deleting these requires using the manufacturer’s companion software or the Windows sign-in options menu.

1. Plug your hardware security key into an available USB port on your computer.
2. Open Settings and navigate to Accounts, then select Sign-in options.

   

3. Click on Security key to expand the management options.
4. Click the Manage button to open the security key configuration window.
5. Follow the on-screen prompts, which usually require touching the physical gold contact on your key.
6. Select the option to reset or erase the security key to wipe all stored passkeys completely. Note: This action is irreversible and erases all credentials stored on that physical token.

Verifying Passkey Removal

After completing the deletion process, you should verify that the credentials are truly gone. Attempt to log in to the target service using your passkey option. The system should fail to recognize the device-bound key and prompt you for an alternative sign-in method like a password or email verification code.

You can also return to Settings › Accounts › Passkeys to double-check that the entry no longer appears in the list. Ensuring the list is completely empty guarantees that no unauthorized user can leverage your biometric data or PIN to access your protected accounts on that hardware.

Advanced PowerShell Cleanup for Orphaned Credentials

This method requires administrative rights and should be approached with caution.

1. Right-click the Start button and select Terminal (Admin) or PowerShell (Admin). Requires administrator privileges.
2. Type the command Get-Credential and press Enter to view active cached session tokens.
3. Use credential management modules to flush orphaned Windows Hello container data if standard GUI methods remain unresponsive.
4. Restart your computer immediately after executing deep clean commands to reset the cryptographic service layer.

Preventing Unauthorized Passkey Creation on Shared PCs

If you share your Windows 11 computer with family members or coworkers, you may want to restrict who can save new passkeys to the local machine. Preventing unauthorized credential creation protects your hardware from accumulating security tokens you did not authorize.

1. Open Settings by pressing the Windows key + I.
2. Navigate to Accounts and select Sign-in options.

   

3. Locate the Additional settings section.
4. Configure your Windows Hello biometric settings to require explicit user verification for every passkey invocation.
5. Ensure separate user accounts are established on the PC so other individuals cannot access your primary user profile or credential vault.