Policy
Let Windows apps autofill passkeys
Microsoft Windows
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10, Windows10RT, Windows11, WindowsServer2016
This policy setting specifies whether apps can autofill passkeys. You can specify either a default setting for all apps or a per-app setting by specifying a Package Family Name. You can get the Package Family Name for an app by using the Get-AppPackage Windows PowerShell cmdlet. A per-app setting overrides the default setting. If you choose the "User is in control" option, employees in your organization can decide whether apps can autofill passkeys by using Settings > Privacy on the device. If you choose the "Force Allow" option, apps are allowed to autofill passkeys and employees in your organization cannot change it. If you choose the "Force Deny" option, apps are not allowed to autofill passkeys and employees in your organization cannot change it. If you disable or do not configure this policy setting, employees in your organization can decide whether apps can autofill passkeys by using Settings > Privacy on the device. If an app is open when this Group Policy object is applied on a device, employees must restart the app or device for the policy changes to be applied to the app.
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Scope | Element | Type | Registry mapping | Constraints & behavior | Copy |
|---|---|---|---|---|---|
| Computer | LetAppsAccessPasskeysEnumeration_UserInControlOfTheseApps_List ID LetAppsAccessPasskeysEnumeration_UserInControlOfTheseApps_List | list | Path Software\Policies\Microsoft\Windows\AppPrivacy Value name LetAppsAccessPasskeysEnumeration_UserInControlOfTheseApps Type REG_MULTI_SZ | None | |
| Computer | LetAppsAccessPasskeysEnumeration_ForceAllowTheseApps_List ID LetAppsAccessPasskeysEnumeration_ForceAllowTheseApps_List | list | Path Software\Policies\Microsoft\Windows\AppPrivacy Value name LetAppsAccessPasskeysEnumeration_ForceAllowTheseApps Type REG_MULTI_SZ | None | |
| Computer | LetAppsAccessPasskeysEnumeration_ForceDenyTheseApps_List ID LetAppsAccessPasskeysEnumeration_ForceDenyTheseApps_List | list | Path Software\Policies\Microsoft\Windows\AppPrivacy Value name LetAppsAccessPasskeysEnumeration_ForceDenyTheseApps Type REG_MULTI_SZ | None | |
| Computer | Default for all apps: ID LetAppsAccessPasskeysEnumeration_Enum | enum | Path Software\Policies\Microsoft\Windows\AppPrivacy Value name LetAppsAccessPasskeysEnumeration Type REG_DWORD | Options: User is in control (0), Force Allow (1), Force Deny (2) |