Set Up MFA Passkey in Authenticator App

Overview

Traditional multi-factor authentication methods, such as text messages, phone calls, and number-matching push notifications in authenticator apps, are no longer sufficient to protect sign-ins to applications that contain sensitive data.

Phishing-resistant MFA provides stronger protection by requiring an interaction between the authentication method and the sign-in experience. It can also eliminate the need to enter a password in addition to the MFA method.

A passkey is a secure way to sign in without entering a password. With a Microsoft Authenticator passkey, you use your phone's built-in security features, such as Face ID, Touch ID, or your device PIN, to verify your identity.

This article shows how to register a passkey in Microsoft Authenticator on your iOS or Android device. To register an Authenticator passkey, your device must have iOS 17 or later or Android 14 or later.

Steps

First Time MFA Setup

If you are logging into your Microsoft account for the first time and have not set up MFA yet, go to https://outlook.office.com and sign in with your Providence College Credentials. You will automatically be prompted to set up your authentication methods. Continue with the steps below to set up your passkey.

Set Up with an Existing Authenticator Account

If your account is already in the Authenticator app:

1. Open the Authenticator app
2. Tap your account, then tap Create a passkey
3. Complete multifactor authentication
4. If necessary, tap Settings and set up a screen lock
5. Follow the prompts to enable Authenticator as a passkey provider
   • iOS 18 or later: In Settings, go to General, then Autofill & Passwords.
   • iOS 17: In Settings, go to Passwords, then Password Options
   • Android: In Settings, go to Passwords & accounts
     • The steps to enable passkey providers on Android might vary based on the make and model of your device. If you don't see this option, search your device settings for Passkey.
6. Ensure AutoFill Passwords and Passkeys is toggled On
7. Under Autofill From, ensure Authenticator is toggled On
8. Return to the Authenticator app and tap Done
9. You will see Passkey added as a sign-in method for your account
10. Tap Done again to finish

Set Up with a New Authenticator Account

If your account is not already set up in the Authenticator app: 

1. Open a web browser and go to https://aka.ms/mfasetup
2. Sign in and select Add a sign-in method
3. If you're asked to sign in with MFA, select Next
4. If you do not have the Microsoft Authenticator app downloaded on your mobile device, download it from the Apple Store (iPhone) or Google Play Store (Android)
5. You will be prompted to open the Authenticator app and create your passkey there
6. Open the Authenticator app and tap Add work or school account
7. Tap Sign in
8. Complete multifactor authentication
9. Follow the prompts to enable Authenticator as a passkey provider
   • iOS 18 or later: In Settings, go to General, then Autofill & Passwords.
   • iOS 17: In Settings, go to Passwords, then Password Options
   • Android: In Settings, go to Passwords & accounts
     • The steps to enable passkey providers on Android might vary based on the make and model of your device. If you don't see this option, search your device settings for Passkey.
10. Ensure AutoFill Passwords and Passkeys is toggled On
11. Under Autofill From (iOS) or Additional providers (Android), ensure Authenticator is toggled On
12. Return to the Authenticator app and tap Done
13. You will see Passkey added as a sign-in method for your account
14. Tap Done again to finish
15. Return to your browser after you finish the passkey setup in Authenticator, and select Next
16. After the passkey is created, select Done

Additional Passkey Methods

Microsoft Authenticator is one of several phishing-resistant MFA options available for Providence College users. Other options include:

• FIDO2 security key (such as a YubiKey)
• Windows Hello

See more information on creating and saving passkeys.