Before you begin, be sure you have the Microsoft Authenticator app installed on your phone and set up your DePaul MFA in it. To register for MFA, please visit this article. You will also need Bluetooth enabled on your devices (laptop and phone/tablet).
FIDO security is an industry standard protocol that grants users secure, passwordless authentication access. To set up a FIDO security hardware key, please follow the instructions below. Note that you will have needed to purchase a FIDO2 key prior to this setup if you want to use a FIDO2 key; FIDO2 keys are not provided to users by the university. A commonly used FIDO2 key is called a YubiKey. Wherever your passkey is stored, Bluetooth will need to be enabled.
- Using your web browser, go to https://mysignins.microsoft.com/security-info to access the Microsoft security portal.
- Log in with your BlueKey credentials to access your account.
- Click on Add sign-in method.
- Choose Passkey.
- You will see a screen similar to the one below. Click Next.
- Choose Security Key.
Have you set up a PIN? If you have, click here to go to the next step.
If you are setting up a security key for the first time you will need to enter a new PIN and confirm it. Note: 'PINs' can be alphanumeric, and you should set your PIN in compliance with DePaul's minimum password complexity requirements. If you have used your security key for other services you will just need to enter the PIN for the key.
What you will see if you need to create a new PIN:
What you will see if you already have a PIN set up.
- Once the PIN has been entered you will be prompted to touch the key to confirm it. Note: Touching your key does not store or share your fingerprint with the device. Touching the key is a security measure to ensure that there is an actual person present and accessing it.
- Enter a name for the new security key and click Next.
- You have successfully created your passkey and your FIDO2 key is now ready for use.