BlueKey MFA: Getting a New Phone


BlueKey multi-factor authentication (MFA) creates added layers of security and verification for DePaul users. Most users will verify their identities through the Microsoft Authenticator app on a smartphone. Below are the steps for moving this authentication method to a new smartphone.

Having troubles registering your new phone? Contact the Help Desk at (312) 362-8765 or email helpdesk@depaul.edu.

A couple of very important steps before switching to a new phone:

1) Make sure that you have additional verification steps added to your BlueKey account, especially "Phone - call" and "Phone-text" with your current phone number. Double check these settings at blueKey.depaul.edu/multifactor. On this page, you can see whether you have registered additional verification methods. Please note that if you are receiving a new phone number along with a new phone, you will need to reach out to the Help Desk for assistance with setting up multifactor authentication for your new number unless you have both devices handy and can do the switch on the spot. For more details on how this works, please see below.

2) (If possible) Don't delete the Microsoft Authenticator app on your old phone BEFORE registering the app on your new phone. If this option is a possibility, you can verify your identity when setting up the new device on your old phone. Not an option? Don't worry. 


There are three options for how to register Microsoft Authenticator and BlueKey MFA on your new phone:

1) Backup all of your settings and configurations to a cloud account (such as a personal Microsoft account or iCloud account). On your old phone, turn on cloud backup.  This can be done at any time (and is a good idea to do before you need to transfer devices) by going to Settings, select Backup, and then turn on Cloud backup.  When you are ready to transfer to the new phone, make sure the Authenticator app is installed.  Go into the Microsoft Authenticator app, and click 'Begin Recovery'.  You will then need to log into your cloud account to recover the backed up settings.  Once this is complete, most configuration settings should transfer over to the new phone, however if you use push notifications (recommended) you will need to set up this new phone with Microsoft by scanning the QR code in the Security Portal.  Microsoft has detailed instructions for the backup/restore process here, and the instructions for re-configuring push notifications begin in the Recover accounts requiring more verification section.  You will need to log into your BlueKey profile here with your BlueKey credentials and then click on 'Security info' in left-hand menu and click Add sign-in method,  then select Authenticator App to get the QR code needed to add your new phone.

2) If you don't want to use a cloud backup and haven't deleted the app and erased your old phone, download the Microsoft Authenticator app on the new phone.  Next, log into your BlueKey profile here with your BlueKey credentials and verify your identity with the Microsoft Authenticator app on the old phone, and then click on 'Security info' in left-hand menu.  Next, click Add sign-in method,  then select Authenticator App and follow the prompts to get to the screen with the QR code needed to add the account to the Authenticator app on your new phone.

3) If the other two options don't work or aren't possible, this option is recommended. Make sure to have "Phone-call" and "Phone-text" as additional verification methods (double check at bluekey.depaul.edu/multifactor). Make sure the phone number is the one  on your new phone (which is likely the same number as your old phone). Download the Microsoft Authenticator app. Open the app and begin the registration process. 

When you get to the option to "Approve sign in request" (see image below), select "Can't use my Microsoft Authenticator app right now", unless of course you can access the app. Choose one of the phone verification methods to complete your registration. 

 

If none of the above options are available to you, or you experience any issues with the MFA setup process on your new device, please contact the Help Desk at (312) 362-8765 or email helpdesk@depaul.edu.