MFA Passkeys

Store and use passkeys securely from the Microsoft Authenticator app (recommended). How to set up passkey in Microsoft Authenticator.

Ideal for:

• Staff and students using a smartphone
• Users wanting the simplest setup
• Users working across multiple devices
• Users seeking the recommended authentication method

You can also use a FIDO2 security key, such as an YubiKey.

Security keys provide strong authentication without requiring a mobile phone or internet connection and are a good option for users who prefer a dedicated authentication device.

Ideal for:

• Shared environments
• High-security use cases
• Users who prefer dedicated hardware
• People who may not always have access to a mobile phone or mobile signal

The University is currently evaluating support for synced passkeys. At present, we recommend using Microsoft Authenticator passkeys or FIDO2 security keys. Guidance on synced passkeys will be provided if and when they become a supported option.

Synced passkeys are securely synchronised across your devices, allowing you to use the same passkey when you change, replace, or use multiple devices.

The University supports synced passkeys stored in:

• Apple iCloud Keychain
• Google Password Manager
• 1Password

These passkeys provide the same phishing-resistant security benefits as other passkeys while offering a seamless sign-in experience across devices.

Ideal for:

• Users working across multiple Apple, Android, or Windows devices (what about Linux?)
• Users who prefer not to rely on a separate hardware security key

Things to consider:

• Availability depends on your device and platform support
• Access to your synced passkeys may depend on the security of the account used to store and synchronise them
• You should protect your passkey provider account using strong authentication, preferably device biometrics or a passkey
• The University's setup guidance will focus primarily on Microsoft Authenticator passkeys and FIDO2 security keys

Passkeys offer the best combination of security and ease of use and are the University's recommended authentication method. However, they are not mandatory, and other supported MFA methods remain available. View all supported authentication methods.