Skip to main content

MFA Passkeys

1. What is a Passkey?

A passkey is a modern, phishing-resistant way to sign in without using a password!

  • Instead of something you know (like a password), a passkey uses something you have (your phone or device) and something you are (Face ID, Fingerprint, or device PIN)
  • The credential is stored securely on your device and is never shared with the website or service that you're signing into. Because of this, passkeys can't be reused, stolen by fake websites, or guessed.
  • Passkeys are based on industry security standards (FIDO2). Your device proves to Microsoft that it's really you, without ever sending a password across the internet. 
    • If the site is not legitimate, the passkey simply won't work, and there's nothing for the attacker to steal. 
  • Your device becomes your key, and your identity stays locked inside it!

PasswordlessSecurity.png

  • Did you know that passwords are the weakest link in modern security? They are often:
    • Reused
    • Phished
    • Leaked in breaches
    • Guessed
  • Microsoft's goal with passwordless sign-in is to:
    • Eliminate passwords as an attack target - No passwords means nothing to phish, reuse, or brute-force. 
    • Reduce account takeovers and phishing - Passkeys only work on the real Microsoft sign-in and approved services. Fake sites can't trick your device into handing over a credential.
    • Make sign-ins faster and simpler - Approving with Face ID, fingerprint, or a device PIN is quicker than typing passwords and codes. 
    • Improve both security and user experience - Stronger security without extra steps, fewer account lockouts. 

Passkeys are part of Microsoft's move to a passwordless future where accounts are protected by your device and biometrics instead of passwords that can be stolen, guessed, or phished

2. Syncable Passkeys

A passkey lets you sign in without typing your password each time. It uses your device's built-in security, such as Face ID, fingerprint, screen lock, or device PIN. 

We recommend saving your passkey to: 
 - Apple Passwords (if you use iPhone)
 - Google Password Manager (if you use Android)

3. Before you Begin

Make sure you have:  Do not create a passkey on: 

Your Piedmont email address

 A public computer

Your current password

A shared family computer

You current MFA method

 A classroom or lab computer

A personal phone or computer that only you use

 A friend's phone

4. Enable Passkey Syncing (iOS/MacOS)

  1. Confirm your iCloud keychain is enabled
    • Open Settings
    • Select your Name / Apple ID at the top
    • Tap iCloud
    • Tap Passwords and Keychain
    • Confirm that the setting Sync this iPhone or Sync this iPad is enabled

  2. On Mac:
    • Open System Settings
    • Click your Apple Account
    • Click iCloud
    • Ensure Passwords is set to Sync


5. Create a Passkey

  1. Open a web browser and visit https://myaccount.microsoft.com 
  2. Expand My Account 
  3. Select Security Info 
  4. You will be prompted to login using MFA. 
  5. Under Other ways to Sign in, select Create a Passkey

    CreatePasskey.jpeg

Select Sign in on the next page.

Login using your Piedmont credentials.

You will be prompted to complete MFA.

Once logged in, yourselect Add sign-in method 

Select Passkey is created.Select Next and follow through the on-screen prompts

UsePasskey.jpeg

3. Sign in with Passkey

  1. When you login using your Piedmont credentials, you will receive a new popup window in place of Microsoft Authenticator
    ChoosePasskey.png
  2.  Select iPhone, iPad, or Android device.
  3. Use your mobile device to scan the QR Code on your computer, select Sign in with Passkey

    PasskeyQRCode.png

  4. On your mobile device, a message will appear "Sign in to login.microsoft.com" on the other device with your passkey for "@piedmont.edu" saved in "Authenticator" ?Passwords?
    • Choose Use Passkey
  5. Your mobile device will prompt for Face ID or biometrics.

4. Use Original Authentication method

  1. In some cases you may need to use the original MFA through the Authenticator app, to do so, select the 'X' or 'Cancel' button and select Sign in Another way
    BypassPasskey.pngUseAuthenticator.png
  2. Select Approve a request on my Microsoft Authenticator app to complete original MFA steps. 

    OriginalMFA.png
  3. Follow the on-screen instructions to approve the Authenticator request. 


Back to top