BlueKey MFA: What should I do if my phone is lost or stolen?

Did you add alternative sign-in methods at

If you added more sign-in methods, this process will be easier. These methods may include a backup phone number, email address, backup device with the Microsoft Authenticator app registered to BlueKey MFA, etc. Login to When asked to "approve sign-in request", click "I can't use my Microsoft Authenticator app right now" (unless you have the app on a backup device). Follow the steps to login.

  1. Under the Security Info section, select "Lost device? Sign out everywhere". Choose to sign out everywhere. This will prevent someone using the device from accessing DePaul apps, services, and systems.
  2. Remove the lost or stolen device as an authentication method, including the Microsoft Authenticator app on that particular phone.

If you didn't add alternative sign-in methods...

If you haven't set up additional sign-in methods, contact the Help Desk. Check Help Desk hours.