Microsoft accounts now support physical security keys