Completing Passkey Prompt — Hardware Security Key

Setting Up Your Passkey Using a Hardware Security Key

Follow the steps below to set up a passkey for your University of Guelph account using a Hardware Security Key. 

Step 1 — Proceed through the prompt

1. Click "Next" on the following two pop-up windows
   
   

Step 2 — Select Where to Save Passkey

1. To save the passkey to your account, select the "Security key" option from the pop-up window
   

Step 3 — Saving The Passkey

1. You'll be presented with a window prompting you to "Save your passkey"
   
2. Insert your hardware security key into an open USB port on your computer
3. You should be prompted on your computer to create a PIN for this security key, at which point you can enter an alphanumeric PIN and then confirm it (character complexity and minimum PIN length are typically device specific, but one thing you should ensure is that you can remember the PIN, as you will be asked to enter it when you use this passkey method in the future).
   
4. After you enter your PIN and click "OK", you will be prompted to touch your security key (assuming you have the HYPERFIDO Pro FIDO2 Security Key with a button on the end of it, otherwise the physical verification method may vary based on your specific key), at which point your can touch the button on the security key.

Step 4 — Name the Passkey

1. As a final step, you'll be prompted to name the Passkey to help identify it later (it is best practice to give it a name that will help identify the specific security key it is associated with)
   

    

2. After you've named the Passkey, you'll be able to proceed with using it to sign in to your account
   

Step 5 — Setup Passkey as Default Authentication Method

1. Log into your U of G M365 account by visiting https://mysignins.microsoft.com/
2. Choose the "Security info" option on the left navigation bar.

3. From the ‘Security info’ page, look for ‘Default sign-in method' and click on the word ‘Change’. 
   

4. You will be presented with a drop-down list of your configured MFA methods. Choose ‘App based authentication or hardware token - code’. 
   

5. Your M365 account is now secured with passkey authentication. 

Your New and Improved Login Experience

The next time you log in, after entering your username (your central login ID @uoguelph.ca or @guelphhumber.ca ),  you will be prompted to use your passkey instead of entering your password.  From the authentication page, ensure "Security key" is selected.

You will then be prompted to insert your security key, enter your PIN you've created for the security key, and then press the button on the security key:

After correctly completing these steps, you should be successfully signed in.