Passkeys: FAQ


FAQ

Jump To: 

What are passkeys?

Passkeys are the future of signing in: simple, secure, and stress-free.

No typing, no guessing, no "forgot password" drama. With passkeys, you don't need to create and remember passwords. Instead of typing a password, you use your phone or device to confirm it's really you, using your face or a fingerprint or PIN. For more information about passkeys, please see the Introduction to Passkeys article.

How do I setup a passkey?

Depending on what type of device you are attempting to set up the passkey with, you will need to see one of the below articles:

Authenticator (Device-Bound) Passkey

Password Manager Passkey

FIDO2 Security Passkey

How do I use my passkey?

Please visit How to Use a Passkey for more information about using your passkey.

Why do passkeys matter?

Passkeys are incredibly easy to use and intuitive, eliminating the need for complicated password creation processes and the hassle of remembering them.

Also, passkeys are unique to each website or application, so you don't have to worry about someone using your passkey to access other services. And unlike passwords, passkeys are resistant to phishing attempts, making them a much more secure option.

Why is DePaul starting to use passkeys?

The university is experiencing increasingly sophisticated hacking attempts in larger numbers. We only anticipate that these malicious threats will grow. It is the Security team's hope to minimize the difficulty of our students, faculty, and staff accessing the digital resources they need, while also reducing the risk that identities, money, or data is stolen or systems are hacked. Although starting to use passkeys can be confusing, they are most secure login method available to the university, and you don't need to remember a password for most things. Please note that you still need your password to log into your DePaul-owned computer.

How do I see all the DePaul passkeys/MFA options I have set up?

Please visit https://mysignins.microsoft.com/security-info to see all of your DePaul passkeys and MFA options.

What is a device-bound passkey?

A device-bound passkey only works with a specific device. For instance, you can have a device-bound passkey on your smartphone. This passkey will never work on another device. This is a popular option since it links the passkey to your smartphone through the Microsoft Authenticator app. 

Can I use a password manager (1Password, Bitwarden, Apple Keychain, or Google Password Manager) for my BlueKey passkey?

Yes, you can also create passkeys in a password manager for your BlueKey access; please note Information Services only supports Microsoft Authenticator for passkeys. Please visit a specific password manager's support documentation for more details about setting up passkeys. More information can be found here.

Can I setup passkeys in both the Microsoft Authenticator app and my password manager?

Yes, you can set up multiple passkeys. Be aware you may be prompted with two different options for passkey authentication on your phone (such as the Authenticator app and Apple Keychain) if you have passkeys set up in multiple places on the same device. 

Having both options on the same device could lead to some confusion. It also may be difficult to remember where you set up each passkey. If you decide to set up multiple passkeys, make sure to take note where those passkeys are set up. It is good to note that having more than one passkey set up will ensure backup verification options if you ever lose a device or passkey.

Whenever you forget which passkeys you have created for your BlueKey account, you can always visit https://mysignins.microsoft.com/security-info (login with BlueKey credentials). On this page, you can view all of your current passkey options as well as other access/MFA information. 

There are multiple ways to create passkeys for my BlueKey account. Which option should I choose?

It is a good idea to choose a passkey strategy before beginning to create passkeys at DePaul. Choosing a consistent option will be easier to remember than adding passkeys in multiple locations. 

Common options for adding passkeys to access your BlueKey account:

Microsoft Authenticator app on your smartphone (device-bound): This is a popular option for folks to use since more than likely you have your smartphone with you. This option is supported by Information Services. As long as you have your smartphone and the Authenticator app with a passkey created, you can access DePaul systems.

Password manager (1Password, Bitwarden, Google Password Manager, Apple Keychain): These passkeys are typically not bound to a device, but rather bound to your password manager app. For instance, if you have your password manager on both your smartphone and a personal laptop, you can use the passkey on either device. Please consult the documentation for your particular password manager for setting up a passkey. DePaul does not recommend any specific password manager, nor does DePaul provide setup support for setting up passkeys on a password manager.

FIDO key (such as Yubikey): A FIDO key is a physical device (it looks like a memory stick) that serves as a physical version of a passkey. This option is supported by Information Services. FIDO keys are secure and a potentially convenient way to use passkeys. You simply choose to add a passkey to the FIDO key (see instructions), and then you bring your physical FIDO key whenever you need to access DePaul systems. The FIDO key requires either a fingerprint or PIN code to access the passkeys so the stored passkeys are useless to a hacker if lost or stolen.  FIDO keys can be a great backup (or even primary) passkey option. If you ever lose or can't use your smartphone with a passkey, you can still access most BlueKey-based DePaul systems with a FIDO key. There's one catch: You need to buy a FIDO key. Despite the cost, many users find a FIDO key (specifically the Yubikey version) to be a very convenient and reliable option.

What do I do if I lose my physical FIDO/Yubikey?

Please log into the Microsoft Portal and select "Delete" next to the passkey. You should always have two methods of MFA set up for your DePaul account to ensure if a method is lost you are still able to access your account.

Can I still use my DePaul passkey on my phone without disconnecting other devices (IE headphones) connected via Bluetooth?

Yes. Having multiple devices connected via Bluetooth does not interfere with the ability to use a passkey.

I don't think I have passkeys enabled on my Android device. How do I enable them?

While this may differ between Android device models and versions, generally you should be able to do the following:

  1. Swipe down on your screen to show your menu.
  2. Tap the Gear icon in the top right corner.
  3. Select "Security and privacy" in the list.
  4. Scroll to "More security settings" and tap it.
  5. Select "Passwords, passkeys, and autofill".
  6. Confirm under "Additional Services" that the slider is turned on for Microsoft Authenticator. It does not have to be your 'Preferred service' to work.
    2. If you have an older version of the Android operating system on your device, your path to get to this setting may differ.

I don't think I have passkeys enabled on my Apple device. How do I enable them?

While this may differ between Apple device models and versions, generally you should be able to do the following:

  1. Under "Security and Privacy", select "Passwords, passkeys, and autofill".
  2. Settings > General > Autofill & Passwords. On your iOS 17 device, go to Settings > Passwords > Password Options.
  3. On both operating systems, make sure that AutoFill Passwords and Passkeys is turned on. Under Autofill From, make sure that Authenticator is selected.

Where can I go to learn more about passkeys?

Please visit Microsoft's instructional article found here for additional details.

What do I do if my DePaul passkey isn't working?

Please use your MFA backup, which is likely the Microsoft Authenticator app, and if you still experience issues with your DePaul passkey, please contact the Help Desk.