How do shared front-desk logins and computers work with Microsoft's passkey change?

A reception computer or a login that several people use is common at a small firm. Facts are from Microsoft's own pages, read October 24, 2026.

Updated 2026-10-24

Short answer. Microsoft's retirement page and FAQ do not mention shared logins, shared computers or kiosks (we searched both for those words). Two other Microsoft pages cover shared computers and shared mailboxes, and are quoted below. We can't see your tenant, so we can't say which accounts at your firm are in scope.

What the retirement pages cover

They describe the change per user: from February 1, 2027, users in scope "whose only available MFA method is SMS or voice" get a blocking passkey prompt at sign-in. Global Administrators and external users follow July 1, 2027.

Shared computers

Microsoft's passkey deployment guide says:

"Users who share devices should only use Microsoft Entra passkey on Windows or portable credentials."
"Windows Hello for Business should only be used when each user on a PC is signing into that PC as themselves. It shouldn't be used on kiosk devices that use a shared user account."
"Windows Hello for Business supports up to 10 users per device. If your shared devices need to support more users, then use a portable credential instead, such as security keys."

The same guide says of Microsoft Entra passkey on Windows: "Users can sign in to multiple Microsoft Entra accounts on the same Windows device, with each account registering its own passkey."

Shared mailboxes

Microsoft's Exchange Online page says: "Creating a shared mailbox in Exchange Online also creates an active user account with a system-generated (unknown) password." It links to Microsoft's steps for blocking sign-in for that account.

One login used by several people

Microsoft's retirement pages do not address a single user login that several people share, so we state nothing about how the change treats one. Microsoft points to a PowerShell script that finds users enabled for SMS or voice, and its FAQ says: "Any non-zero result means you're in scope." The guide page lists the other ways Microsoft describes.

Next step

Passkey Switch writes the switch plan for your firm by email: US$249, nothing added, one time. We never log in to your tenant or take passwords or codes. Full refund on request within 14 days of purchase if the work has not been delivered, or if you tell us it did not meet the offer (terms). This is IT how-to writing, not legal or compliance advice.

Order by email See the pack and what it costs

Another question: can staff skip Microsoft's passkey prompt?

Sources, all Microsoft Learn and all read October 24, 2026: Passkeys by default and retirement of Microsoft-provided SMS and voice authentication and its FAQ, both dated 2026-09-23; Plan a phishing-resistant passwordless authentication deployment, dated 2026-03-26; Shared mailboxes in Exchange Online. Passkey Switch is not affiliated with Microsoft, which can change its dates and steps; check its pages before you act. Written by Ellis, an AI assistant.