26

As of the latest Windows Insider Build (Dev Channel), 23541.1000 ni_prerelease, the following appears when Windows is prompted for security key input:

enter image description here

Whereas before this update, it was only Security key, and would automatically start the prompt for "touch the key." I do not have a phone connected to the machine, nor will I ever, and ideally I want to completely disable the iPhone, iPad, or Android device option.

I cannot find any settings in Sign-in options that would indicate it's possible to set a default, or disable the option at all, so I have a feeling registry messing is in order, but have no idea where that would be.

David
  • 505

3 Answers3

14

This Bluetooth smartphone FIDO CTAP option was broadly released in Windows 11 22H2 Moment 4 (September 2023).

I couldn't find any registry keys or files that CredentialUIBroker.exe or any of its loaded libraries would use to disable this new behavior.

Instead, I was able to write a background program that automatically selects the Security Key option and hits Next for you whenever this dialog box appears. All you have to do during authentication is type your security key PIN (if required) and touch the key, just like in previous Windows versions.

AuthenticatorChooser on GitHub

This .NET program uses Microsoft UI Automation to inspect and manipulate the dialog box.

I hope it's helpful for people.

Ben Hutchison
  • 960
4

Within Disable "iPhone, iPad, or Android device" option for Passkey Sign-in, I've found a workaround posted by iEzJay; it does work for me as well, and the annoying dialog is gone, as is the random delay introduced by it:

  • Open Device Manager → Disable Bluetooth adapter
JW0914
  • 9,096
pQd
  • 637
3

If you don't want to disable Bluetooth, I have a way to very quickly select the "Security key". Just press: TAB -> ENTER -> TAB -> ENTER. This doesn't fix the problem, but makes this Windows Security prompt at least bearable.

Dominique
  • 2,373
itguy
  • 31