Passwordless Guides and Best Practices

Synced vs. device-bound passkeys in Entra ID - which passkey type should you deploy for phishing-resistant MFA

Should I Use Synced or Device-Bound Passkeys in Entra ID?

October 23, 2026

Aaron Crawfis

Synced vs. device-bound passkeys in Entra ID - learn where the private key lives, the risks of syncing, and the two-passkey setup we recommend for every user.

Restrict Entra ID access to corporate-managed devices without Intune using Entra CBA

How to Lock Down Access to Entra ID From Only Corporate Managed Devices Without Intune

October 7, 2026

Keytos Team

Learn how to restrict access to Entra ID from only corporate managed devices without using Intune by leveraging certificate-based authentication with Entra CBA and Keytos solutions.

Keytos Shield vs. EZCA + EZRADIUS: Which is Right for Your Organization?

What's the Difference Between Keytos Shield and EZCA + EZRADIUS and Which Should I Choose?

September 8, 2026

Aaron Crawfis

Learn how Keytos Shield compares to EZCA + EZRADIUS and which solution is best for your organization. Discover the differences in features, cost, and management between the two passwordless authentication solutions.

Learn how to fix NPS Event ID 6273, Reason Code 8, and how EZRADIUS Cloud RADIUS can help you authenticate cloud-only devices without needing an account in Active Directory.

Fixing NPS Event 6273 Reason Code 8 (And Why Cloud-Only Devices Always Hit It)

August 10, 2026

Aaron Crawfis

NPS Event ID 6273, Reason Code 8 means that the user or device account trying to authenticate does not exist in Active Directory. Learn how to fix this issue and how EZRADIUS Cloud RADIUS can help you authenticate cloud-only devices without needing …

EZRADIUS is the best cloud RADIUS server for Azure environments

Does Azure Have a Cloud RADIUS Server for Network Authentication?

June 19, 2026

Keytos Team

Learn about the best cloud RADIUS server options for Azure and Microsoft services, including solutions that integrate seamlessly with the Microsoft ecosystem for network authentication.

How To Do Certificate-Based Wi-Fi Authentication for Jamf-Managed Apple Devices - The Ultimate Guide

May 25, 2026

Aaron Crawfis

Learn how to set up certificate-based WPA Enterprise Wi-Fi authentication for Jamf-managed Apple devices using SCEP profiles, EZCA certificate issuance, and Cloud RADIUS for zero-touch enrollment and passwordless Wi-Fi access.

How to Connect Android Phones to Your Company Wi-Fi

April 8, 2026

Keytos Team

Learn how to connect Android phones to the company Wi-Fi using passwordless certificates, Entra ID accounts, and guest networks using EZRADIUS for a seamless experience for your users.

What Are The Best SCEP Certificate Authorities (CAs) for Jamf Environments?

April 1, 2026

Aaron Crawfis

Jamf Now, Pro, and School are powerful tools for managing Apple devices, but choosing the right SCEP certificate authority is crucial for secure and efficient device management. In this article, we explore the best SCEP certificate authorities that …

How to Enable Passwordless RDP with FIDO2 Security Keys in Microsoft Intune

March 11, 2026

Keytos Team

Using hardware tokens like YubiKeys and the FIDO2 protocol is becoming increasingly popular. Learn how you can enable these methods for Microsoft Intune.