Passkeys

Before using passkeys!

Signing in with a passkey requires you to scan a QR code instead of entering a password. If you have difficulty scanning QR codes on your mobile device, you may prefer to use the Microsoft Authenticator app and sign in using a one-time code instead.

We have introduced a faster, easier, and password‑free way for you to sign in. By setting up a passkey to use through the Microsoft Authenticator app on your phone, you will have the option to log in without using a password.

Instead of entering codes or remembering complex passwords, you’ll simply approve the sign‑in on your mobile device using Face ID, Touch ID, or your device PIN. It’s quicker, more convenient, and offers stronger protection against phishing and credential theft, an important step in our move toward a fully passwordless experience.

Phishing is when scammers try to trick you into giving away personal information like passwords or bank details by pretending to be a trusted organisation, often through emails or messages that look genuine.

To better protect people from this, there’s a growing shift, led by companies like Microsoft, towards phishing-resistant ways of signing in. Instead of relying on passwords that can be stolen or guessed, passkeys use your own device to confirm it’s really you.

Because passkeys only work on legitimate websites and on your trusted device, they can’t be easily captured or reused by scammers. So even if you click on a fake link, your information stays protected, making it much harder for phishing attacks to succeed.

For more information, see Microsoft’s article explaining how you can sign in more securely without using passwords.

World Passkey Day: Advancing passwordless authentication | Microsoft Security Blog

To set this up (it only needs to be done once), follow the video guide below for your device.  If you need support, please contact the Service Desk. If you encounter issues on a specific device, include the device type and any screenshots of error messages.

Frequently Asked Questions

I'm being prompted for a passkey, but I am not sure if I have one?

If you have previously set up a passkey on your account, it should still be available on your mobile device unless you have uninstalled the Microsoft Authenticator app.

To check whether you have a passkey set up:

1. Open the Microsoft Authenticator app on your mobile device.
2. Select your Ulster University account.
3. Look for Passkey in the list of authentication methods.
4. If Passkey is not listed, there is no passkey on your current device. If you are being prompted for a passkey, you may need to contact servicedesk@ulster.ac.uk to request an MFA reset.
5. If Passkey is listed, select it to open the passkey screen.
6. Sign in to Office.com using your email address on your laptop. When prompted to use a passkey, select iPhone, iPad or Android device.
7. When a QR code appears on your laptop screen, select Scan QR code in the bottom-right corner of the screen. The icon appears as a square scanning frame with four corners and a small QR code symbol inside.
8. Scan the QR code on your laptop. This should connect your devices and sign you in.

Important: Bluetooth must be enabled on your mobile device to verify the passkey and connect the devices. If Bluetooth is turned off, you will need to enable it before scanning the QR code.