In Windows 10 for business, this feature replaces passwords with strong two-factor authentication on PCs and mobile devices - a new type of user credential that's tied to a device and uses a biometric or PIN. This lets users authenticate to an Active Directory or Azure Active Directory account.