A Passkey is a secure way to sign in to your University account without using a One Time Passcode sent to you by SMS Text Message or Phone Call.
A Passkeys uses a device that you already trust to confirm that it is really you signing in. Passkeys provide stronger protection against phishing and other attempts to steal your University account details.
What is a Passkey?
Despite the name, a Passkey is not another password that you need to remember.
When you create a Passkey for your University network account, your device creates a secure credential that can be used to validate your identity when you sign in to University digital services.
You then unlock that credential using the security built into your device, such as fingerprint, facial recognition or a PIN.
Creating a Passkey using your mobile device.
You can use the security in your device to create a Passkey without downloading an additional app.
Follow these instructions on the device you want to use a Passkey on:
Go to your My Sign-Ins page and sign-in with your University email address and password.
Select “Add sign-in method”
Select “Passkey“
Follow the instructions on your device.
Creating a Passkey using the Microsoft Authenticator App
The Microsoft Authenticator app can use your passkey instead of generating a passcode. This makes signing in quicker and easier. Select “Passkey in Microsoft Authenticator”.
Follow these instructions on the device you want to use a Passkey on:
Go to your My Sign-Ins page and sign-in with your University email address and password.
Select “Add sign-in method”
Select “Passkey in Microsoft Authenticator“
Follow the instructions on your device.
Frequently Asked Questions
Why is the University introducing passkeys?
Passwords and One Time Passcodes (OTPs) sent by SMS and Phone Calls can be targeted by phishing attacks.
Passkeys provide a more secure method of verifying your identity.
They also make signing in easier.
Depending on the device you use, you may be able to authenticate using:
- Your fingerprint
- Facial recognition
- Your device PIN
- Windows Hello
- A physical security key
Where can I store my passkey?
Passkeys can be stored on:
Your mobile device
Supported smartphones and tablets can store passkeys and use the device’s own security to authenticate you.
The Microsoft Authenticator App
Microsoft Authenticator is the only app that supports Passkeys if you do not want to use your device’s own security.
Your computer
For example, Windows Hello can be used to create a passkey protected by your Windows Hello PIN, fingerprint or facial recognition.
A physical security key
A FIDO2 security key can store a passkey independently of a phone or computer. This can be particularly useful if you cannot, or do not want to, use a mobile phone for authentication.
Do I still have a University password?
Yes. The introduction of Passkeys will not remove your University password.
A Passkey provides another, more secure way of authenticating.
What if I get a new phone or computer?
Passkeys are associated with the device or credential on which they are stored. If you replace a device, you may need to register a passkey on the new device.
It’s therefore important to have another University-approved authentication method available while changing devices.
What happens if I lose a device containing my passkey?
Losing the device does not mean that somebody automatically has access to your University account.
The person would also need to unlock the passkey using the security protecting that device.
If a device containing a University passkey is lost or stolen, however, you should report it to the SIZ as soon as possible, and remove the authentication method from your account as soon as possible.
The SIZ can be contacted on help@chi.ac.uk or 01243816222
What if I don't have a smartphone?
You don’t necessarily need a smartphone to use a passkey.
For example, you may be able to use Windows Hello (PIN, Biometrics or Finger Prints) on personal Microsoft Windows computer.