How to use a passkey in Microsoft Authenticator

Objective

How to use a passkey in Microsoft Authenticator.

Procedure

To sign-in using a passkey that you generated and stored in the MS Authenticator app on your device:

  1. When prompted to complete MFA, click on Sign in another way and select Face, fingerprint, PIN or security key option.
  2. When prompted to "Chose a passkey," select iPhone, iPad or Android device or Use phone or tablet. This will display a QR code on your screen.

    Uploaded Image (Thumbnail)
     
  3. On your mobile device, launch Microsoft Authenticator app and tap on University of Windsor. This will open your UWin Account profile.
  4. Tap on Passkey.
  5. Tap on the blue circular icon in the bottom right corner.
  6. Scan the QR code from your computer screen.
  7. Confirm access on your phone.

NOTE: Bluetooth must be enabled on both devices when using a passkey across devices (for example, signing in on your computer using your phone) because it allows the devices to confirm they are physically close to each other. This proximity check is an important security measure that helps prevent remote attackers from tricking you into approving a sign‑in request from another location. Bluetooth does not transmit your passkey or any sensitive information; it simply ensures that the authentication request is happening locally between your devices, while the actual sign‑in process remains protected using secure encryption and your device’s built‑in security (such as biometrics or a PIN).