Set up Microsoft passkey for multifactor authentication

Table of Contents

• Overview of Passkeys
• Before You Start
• Setting Up Passkey
• What's Next

Overview of Passkeys

Passkeys are a secure way to sign in to websites and apps. Instead of a password, a passkey uses your device to confirm it's really you with either a PIN, fingerprint, or face recognition. To improve account security, the university is moving from traditional multifactor authentication (MFA) to passkey using the Microsoft Authenticator app.

All University of Arkansas faculty, staff, and students will be required to set up a passkey by December 1st, 2026.

Before You Start

Before you set up passkey, there are requirements you must complete or confirm with your devices first.

• Microsoft Authenticator App:
  •  If you do not already have the Microsoft Authenticator App installed, please visit the MS Authenticator Setup Instructions to set that up.
• Windows Hello: If you use a university managed Windows computer for work, you must set up Windows Hello before creating your passkey.
  • Note: If you are a student or use a personal device, we recommend you set up Windows Hello but it is not required. You may continue with the steps in the Setting Up Passkey section.

• Mobile Device Requirements:
  • Android running 14 and later
  • iOS running 17 and later
• Bluetooth Requirements:
  • Make sure Bluetooth is turned on for both your computer and mobile device.

If your mobile device does not meet these requirements, or you have a reason for not using the Microsoft Authenticator app for passkey on your personal mobile device, you may request a YubiKey to use as your primary MFA method.

Setting Up Passkey

Part 1: Create the Passkey

1. Open the Microsoft Authenticator app on your mobile device.
2. Select your University of Arkansas account.
   
   
    
3. Select Create a passkey.
   
   
    
4. Choose Sign In on the Let’s create your passkey screen.
   Note: You may be prompted to sign-in with your existing multifactor setup at this step.
5. Unlock your mobile device however you normally do. If your device does not have a screen lock, you'll be asked to set one up before continuing.
6. When the passkey is created, you'll see a Passkey Created screen. Select Done.
7. In your phone Settings, enable Authenticator for passkey use.
   • If using iOS: Go to Settings, General, Autofill & Passwords, and ensure that AutoFill Passwords and Passkeys is turned on.
   • If using Android: Go to Settings, Passwords, Accounts, Under the Additional providers section, make sure Authenticator is enabled. 

Your passkey has now been created. Please continue to Part 2: Verify Passkey.
Note: If you have any issues at this step, go to the Security Info page and select "Sign out everywhere" at the bottom. Then, continue with the instructions.

Part 2: Confirm Passkey

1.  Go to the My Account page and sign in with your new passkey. 

2. Under My Account, select the Security Info tab. This will show you a list of the sign-in methods that you have set up. Make sure your passkey was created by looking for: "Passkey (Device Bound) Microsoft Authenticator". If you do not see this option, the passkey was not created correctly. Return to Part One to create the passkey again. 

Part 3: Enroll in the "MFA with Passkey in Microsoft Authenticator" Group

1. After confirming that the passkey is in your list, select My Access in the left navigation pane.

2. Under My Access in the left navigation, Select Access Packages.
   
   
    
3. Select View All.
   
   
    
4. Choose Request in the "MFA with Passkey in Microsoft Authenticator" row.
   
   
    
5. Select Continue when the window opens.
   
   
    
6. Before enrolling in this group, answer the questions in the Additional Questions window:
   1. Select Yes or No to answer, "Have you registered a Microsoft passkey in Microsoft Authenticator or registered a YubiKey?"
   2. Select Yes or No to answer, "For Windows users, have you set up Windows Hello for Business?"
   3. You can leave the Business Justification field blank.
   4. Click the Submit Request button. 
      
      

A green message in the upper-left corner confirms your request was submitted. This will not take long to process.

What's Next

You will receive an email to your UARK email account from Microsoft Security with the subject line, "You now have access to MFA with Passkey in Microsoft Authenticator" to let you know that you have successfully enrolled in the required security group. Both parts are complete, and you are ready to use your passkey to access university resources. 

Depending on whether you’re signing in to your assigned work computer, a shared computer or device, or your mobile phone where the passkey is stored, the sign in experience will vary. Please visit the Sign in with Microsoft Passkey article for more information about using passkey in your daily work on campus. 

Need Help?

Need more information? Check the Related Articles sections on this page (on the side) for additional resources that might help. 

• Submit a UARK IT Help ticket for any issues you encounter when setting up a passkey.
• Submit an IT training request for personalized support from the IT Training and Outreach.
• (For Help Desk Use) Responsible Group: IT Training and Outreach