Passkeys and multi-factor authentication (MFA)

Passkeys

A passkey is a fast, secure, password-free way to sign into websites and applications.

How do passkeys work?

• A passkey is bit like a digital house key. Your trusted device (phone, laptop or USB security key) holds a unique key that is unlocked by your fingerprint, face ID or device PIN.
• The passkey is securely stored on your device and is never shared.

Why use passkeys?

• They are fast and easy to use. Just use your fingerprint, face scan or device PIN.
• Passkeys are highly secure because they cannot be guessed, reused, or stolen in phishing attacks.

We recommend setting up a passkey in Microsoft Authenticator as your primary sign-in method.

Set up a passkey using Microsoft Authenticator

Note: To use passkeys on the Microsoft Authenticator app, you will need to set up authentication using the Authenticator app and then add a passkey. Your device needs to be running at least Android 14 or iOS 17. You also need to have the latest version of the Authenticator app installed. If you can't set up a passkey please use the number matching method below.

1. On your phone, visit the App Store (iPhone) or Play Store (Android) to download and install the Microsoft Authenticator app. Ensure that you allow it to use your camera and send notifications when it prompts you.
2. On your computer, go to https://mysignins.microsoft.com/security-info and sign into your Microsoft account.
3. Select Add sign-in method.
4. On the Add a method window, select Passkey in Microsoft Authenticator.
5. On your phone, open the Authenticator app, click the menu button (three dots or +) and then Add account.
6. Click Work or school account then sign in using your username and password.
7. Click Scan a QR code. If the app asks for permission to use your camera, click Allow.
8. The app should then open a QR code scanner. Point your camera at the QR code on your computer screen.
9. On your computer, click Next.
10. On your phone, click Enable phone sign-in or Approve. You may also need to unlock the app using your phone’s PIN, your fingerprint or retina scan.

Once you have set up authentication using the Microsoft Authenticator app, you can add a passkey. You can either do this from the app or from the Microsoft MySignIns page on your computer.

Set up the passkey in the Microsoft Authenticator app

1. In the app, click on your usernmae
2. Click 'create a passkey'
3. Follow the instructions on your phone. You may have to sign into your account again via the app.

Set up the passkey using your computer

1. On your computer, click add sign in method
2. Click passkey in Microsoft Authenticator
3. Click next, then follow the instructions using your phone and computer. You may have to sign into your account again via the Microsoft Authenticator app.

Authenticating with a passkey

When you log in, you will be prompted to do so using your passkey. Select continue or approve.

If you are not prompted to sign in using your passkey, you may need to:

1. Select other ways to sign in..
2. Select Face, fingerprint, PIN or security key or Use another device.
3. Select iPhone, iPad or Android Device.
4. You will be presented with a QR code.
5. Use the camera on your phone to scan the QR code.
6. Follow the steps to authenticate using your face ID, fingerprint and device PIN.

Set up the Authenticator app using number matching

1. On your phone, visit the App Store (iPhone) or Play Store (Android) to download and install the Microsoft Authenticator app. Ensure that you allow it to use your camera and send notifications when it prompts you.
2. On your computer, go to https://mysignins.microsoft.com/security-info and sign into your Microsoft account.
   Select Add sign-in method.
3. On your phone, open the Authenticator app, click the menu button (three dots or +) and then Add account.
4. Click Work or school account then sign in using your username and password.
5. Click Scan a QR code. If the app asks for permission to use your camera, click Allow.
6. The app should then open a QR code scanner. Point your camera at the QR code on your computer screen.
7. On your computer, click Next.
8. On your phone, type the number shown on your computer screen or other device and click 'yes' to confirm sign in. 
9. Follow the instructions onscreen to complete set up.

If you can't use a passkey or smartphone

You can also use a USB security key (YubiKey) as an MFA method.

Students and staff can collect a security key from the IT Counter. You must show your student or staff ID card (UCard) to collect a security key. 

You can also buy your own USB security key. This must be a Yubico Security Key C NFC.

Note: To add a security key, you must have set up another MFA method.

Help and support

We have advice about using MFA, including how to set MFA up on a new phone. If you need more support, please contact IT Services by phoning 0117 428 2100, visiting the IT Counter or using the IT self-service site (requires log-in). More technical queries, such as a reset to MFA if you have lost your phone or authentication device, can be resolved from 8 am until 5 pm, Monday to Friday (apart from University closure days).

Form for students to report problems with accessing their UoB account when overseas

This form is for students at the University of Bristol who are currently overseas and need to report an access problem that prevents them from using the self-service site or calling the IT Service Desk. If you are able to use the self-service site or call the Service Desk, please use those methods; otherwise, complete the form.