New BlueKey authentication requirements: Microsoft is removing text and call six-digit code


What is happening?

Starting on Feb. 1, 2027, multi-factor authentication (MFA) will no longer support 6-digit code via text message (SMS) or verification via phone call (voice) to authenticate your identity. Microsoft is removing these options to improve security. This change will apply to all Microsoft users, which includes DePaul students, faculty, staff, and anyone else with BlueKey credentials.  

I use 6-digit code via text message (SMS) or verification through phone call (voice) to authenticate. What do I need to do?

If you use text or voice for MFA, take these steps to update your account settings:

  1. Download the Microsoft Authenticator app on your smartphone or mobile device (if you haven't already).
  2. Visit mysignins.microsoft.com/security-info on your computer and choose "add sign-in method". Choose "Microsoft Authenticator". Follow the steps on the web page and the app to connect the Microsoft Authenticator app with your BlueKey account. See detailed instructions below.
  3. Change your default sign-in method if it's text (SMS) or phone (voice) to an Authenticator-based method.
  4. All BlueKey account users are encouraged to use passkeys instead of MFA for account access. Passkeys offer more security and access without passwords.

Passkeys are easier and more secure

Passkeys are now available on your BlueKey account. Passkeys are more secure than MFA and often more convenient. Learn more about using one or multiple passkeys. Instructions for different passkey options:

Tutorial video: Adding Microsoft Authenticator to BlueKey and changing your default sign-in

Links from video: 

  1. Download the Microsoft Authenticator app
  2. Visit mysignins.microsoft.com/security-info

Detailed instructions: Adding the Microsoft Authenticator app to your BlueKey account

  1. If you haven’t downloaded the Microsoft Authenticator app on your smartphone, make sure to download the Microsoft Authenticator app
  2. Please note you can always add the Authenticator app to multiple mobile devices.
  3. After adding the app to your smartphone, return to the BlueKey account page on your computer and select the plus button next to “Add sign-in method”

Select the Microsoft Authenticator option.

Install the Microsoft Authenticator app on your smartphone if you haven’t already, and click next.

Open the Microsoft Authenticator app on your smartphone and click the + button in the top right corner.

Select Work or school account. An option will appear to scan a QR code from within the Microsoft Authenticator app. Select Scan QR code. Make sure to allow access to your camera, and your smartphone should be ready to scan the QR code on your computer screen. Click next on your computer, and a QR code will appear. Scan it with your phone.

After scanning the QR code and adding your BlueKey account, your DePaul account should appear listed in the Authenticator app. You are now ready to receive verification requests in Microsoft Authenticator. You will still need to change your default sign-in method.

Changing your default sign-in method

There are two options to authenticate your BlueKey account with the Microsoft Authenticator app. Visit mysignins.microsoft.com/security-info to change your default MFA sign-in method.    

  1. Receive a pop-up on your smartphone to approve a login. Open the Microsoft Authenticator app. Type the two-digit code from your computer into the app on your phone.  
  1. Open the Microsoft Authenticator app. Type the six-digit code displayed in the app onto the six-digit prompt on your computer.  

Make sure to test this authentication method before important meetings, classes, or events.