A Microsoft Authenticator Passkey lets you securely sign in to university systems using the Microsoft Authenticator app on your smartphone instead of entering a security code. Microsoft Authenticator Passkeys are designed to protect against phishing attacks while making sign-in faster and easier. 

After setting up a passkey in Microsoft Authenticator, you can confirm your identity using:

  • Face recognition (Face ID)
  • Fingerprint recognition
  • Your device passcode

Equipment Needed

  • A smartphone: iPhone running iOS 17 or later or Android running Android 14 or later
  • The Microsoft Authenticator app installed on your smartphone
  • Internet access on both your smartphone and the device you’re signing in from
  • Bluetooth enabled on both your smartphone and the computer you’re signing in from

Who Should Use a Microsoft Authenticator Passkey?

For many employees and students, a passkey is the easiest way to meet phishing-resistant multifactor authentication requirements. Passkeys are a great option if you:

  • Regularly use a smartphone
  • Want a simple sign-in experience
  • Want to avoid security codes and push notifications
  • Access university services from multiple devices

Set Up Your Microsoft Authenticator Passkey

Please refer to these step-by-step setup guides and short how-to videos to set up a passkey in Microsoft Authenticator for your device type.

Need Help?

If you need further assistance, please reach out to your Help Desk.

Frequently Asked Questions

No. Most users can create a passkey using a smartphone they already own through the Microsoft Authenticator app. 

Typically, no. Most users can use the passkey created through the Microsoft Authenticator app. There may be a few local applications that still require a password.

If you already have the Microsoft Authenticator app set up on your phone and use it to receive push notifications or to match a number, this is not the same as a Passkey. Push notifications and one-time passcodes through the Authenticator app ARE NOT phishing-resistant. For the best protection against phishing attacks, set up a passkey in the Microsoft Authenticator app, Windows Hello for Business or a physical security key, such as a YubiKey.

Before replacing your phone, make sure you have another MFA method registered on your account. 

 

If you’ve already replaced your phone, contact your campus IT Help Desk for assistance.

Your passkey is protected by your phone’s security features. We strongly recommend setting up at least two methods, such as Passkey in Microsoft Authenticator, Windows Hello or a physical security key. Having a backup ensures you can always access your account.