Allthenticate unlocks Windows in three different ways, and the right one depends on the account you sign in with. This page helps you find yours in about 2 minutes, so you only set up what you actually need.
<aside> 🛑
Before you change anything: Don't create an Entra (Azure AD) tenant or join your computer to a domain just to use Allthenticate. Setting up Entra does not domain-join your computer, and joining a computer to Entra changes how you sign in: on Entra-joined computers, Allthenticate currently supports sign-in with passkeys only. If you're on local accounts today, Allthenticate already works for you as-is.
</aside>
<aside> 💻
Not on Windows? Skip this page and follow Mac Passwordless Guide or Linux Passwordless Guide. For installing the desktop app on any OS, see Getting Started with Desktop Passwordless (All OSes).
</aside>
On the Windows computer you want to unlock:
While signed in as yourself (not an IT or admin account), press the Windows key, type cmd, and open Command Prompt. Don't choose "Run as administrator."
Type this command and press Enter:
whoami
Look at the part before the backslash in the result:
| If you see… | Example | You have a… | Go to |
|---|---|---|---|
| Your computer's name | desktop-7h2k\maria |
Local account | 🟢 Path A |
| AzureAD | azuread\mariagarcia |
Entra (Microsoft cloud) account | 🔵 Path B |
| Your company's domain name | acmecorp\mgarcia |
Active Directory domain account | Continue to Step 2 |
Run this in the same Command Prompt:
dsregcmd /status
Near the top, find AzureAdJoined:
AzureAdJoined : NO → On-premises Active Directory → 🟠 Path CAzureAdJoined : YES → Hybrid (joined to both AD and Entra) → 🟣 Path D<aside> 💡
Managing many computers? See Understanding Your Windows Environment for fleet-wide checks, or fill out the Windows Environment Scoping Form and we'll tell you your path.
</aside>