2SV: Passwordless Authentication Using Passkeys

Tired of entering a username and password every time you sign in to your VIU account on a new device or web browser? If you answered yes, then we've got some great news for you. VIU now (mostly) supports (and strongly recommends) passwordless authentication using passkeys for all students and staff.

Passkeys provide a more secure, phishing-resistant alternative to traditional passwords, reducing the risk of account compromise while delivering a faster and more seamless sign-in experience.

Note: Not all VIU Systems support passkeys at this time. We are actively working on expanding coverage. For systems that do not support passkeys, you will enter your username/password to sign-in.

Table of Contents

What is a Passkey?

A passkey is a secure digital credential that replaces your password. Instead of entering a password, you sign in using a trusted device, such as your phone, personal computer, or a Security Key (aka FIDO2 Security Key for nerds). This is then combined with a secure unlock method like a fingerprint, facial recognition, or PIN.

Passkeys are built on strong cryptographic standards and are designed to:

  • Work only with legitimate websites and services.
  • Prevent phishing attacks by eliminating password entry.
  • Keep your credentials securely stored on your device.

Benefits of Using Passkeys

  • Improved Security
    Passkeys eliminate weak or reused passwords and provide strong protection against phishing and credential theft.
  • Simplified Sign-In Experience
    No passwords to remember, reset, or manage.
  • Faster Access
    Sign in quickly using your device’s built-in authentication methods.
  • Reduced Risk of Account Compromise
    Passkeys are unique to each service and cannot be reused across sites.

Current Supported Passkey Methods at VIU

You can use the following options to enable passwordless authentication with passkeys:

  • Microsoft Authenticator App (Recommended)
    Enables you to securely approve sign-ins using your mobile device and biometric authentication. To use passkeys with the app, your device must be running iOS 17/Android 14 or later.
  • Security Key
    A physical hardware key (USB or NFC) that securely stores and uses passkeys for authentication. An example of a Security Key is a YubiKey (our recommendation).

Where can I get a Security Key?

** Coming Soon ** - We are currently working with our suppliers in IT and the Campus Store to stock Security Keys. At this time we do not have any on hand. In the mean time we are publishing this information for those of you who may already own a Security Key and want to start using it or are planning to use the Microsoft Authenticator App.

If you can't use the Microsoft Authenticator App on your phone to hold your passkey you can get a Security Key to store it on instead.

Employees - Contact IT to request one

Students - They can be purchased in the VIU Campus Store or ordered online from Yubico directly or via Yubico's Amazon Store. We recommend the "YubiKey 5C NFC" model with a USB-C or USB-A connector depending on what is available to you on your personal devices. All VIU Desktops offer an open USB-C and USB-A port on the front of the tower so either type will work on our Desktops and Laptops.

Set Up Passwordless Authentication with a Passkey in Microsoft Authenticator

Note: If you already use the Microsoft Authenticator app for 2SV on your VIU account, please see the next section of this article for a faster setup experience.

  1. Go to: https://aka.ms/mysecurityinfo
  2. Sign in using your VIU Computer account.
  3. Select Add sign-in method.
  4. Choose Passkey in Microsoft Authenticator.
  5. Follow the prompts to complete setup on your device.

Already Use the Microsoft Authenticator for Your VIU Account?

Great! If you already use the Microsoft Authenticator app for 2SV, setting up a passkey is quick and simple.

  1. Open the Microsoft Authenticator app on your mobile device.
  2. Locate and select your VIU account from the list of accounts.
  3. Within your account, tap the Create a passkey option.
  4. You’ll be prompted to sign in to your VIU account. Complete the sign-in when asked.
  5. After signing in, you may be prompted to register your device. If prompted, select the option to register your device as a passkey for your account.
    Note: Registering your device does NOT give VIU access or control over it.
  6. Follow the rest of the on-screen prompts to complete the setup.

Set Up Passwordless Authentication with a Security Key (Windows + Yubikey)

  1. Go to: https://aka.ms/mysecurityinfo
  2. Sign in using your VIU Computer account.
  3. Select Add sign-in method.
  4. Choose Passkey
  5. Click Next
  6. Choose Security key
  7. You will then be prompted to create a PIN. Enter a PIN of your choosing twice, or enter your existing PIN if you've previously used this Security Key, and click Done
    Note:
     Your PIN must be a minimum of 4 alphanumeric characters. There are no complexity requirements like needing a symbol, number, capital, etc. DO NOT forget this PIN as it cannot be recovered and will require resetting your Security Key and losing all Passkeys stored on it. Follow the steps in this KB to reset your Security Key.
  8. Follow the instructions to setup your Security Key
  9. When the setup completes you will be asked to name your passkey. We recommend "VIU Security Key" but you can enter anything you want.
  10. Click Done

Set Up Passwordless Authentication with a Security Key (macOS + Yubikey)

Warning: There is currently a bug in Firefox on macOS where you cannot complete these steps using Firefox. We recommend following these steps with Safari. Once you've setup the Security Key with Safari it will work with Firefox for logins.

  1. Connect your Security Key if you have not already and choose Allow if prompted
  2. Go to: https://aka.ms/mysecurityinfo
  3. Sign in using your VIU Computer account.
  4. Select Add sign-in method.
  5. Choose Passkey
  6. Click Next
  7. Click Next again
  8. Click More Options
  9. Choose Use Security key and Continue
  10. You will then be prompted to create a PIN. Enter a PIN of your choosing twice, or enter your existing PIN if you've previously used this Security Key, and click Done
    Note:
     Your PIN must be a minimum of 4 alphanumeric characters. There are no complexity requirements like needing a symbol, number, capital, etc. DO NOT forget this PIN as it cannot be recovered and will require resetting your Security Key and losing all Passkeys stored on it. Follow the steps in this KB to reset your Security Key.
  11. Follow the instructions to setup your Security Key
  12. When the setup completes you will be asked to name your passkey. We recommend "VIU Security Key" but you can enter anything you want.
  13. Click Done

What Does Logging In Using a Passkey Look Like?

When you sign-in using a passkey, you no longer need to enter a username or password at any point in the login process.

Any time you see a standard Microsoft 365 or the VIU branded Microsoft 365 login page:

Standard Microsoft 365 login page VIU branded M365 login page
Uploaded image Uploaded image

If you are using the Microsoft Authenticator App

  1. Click Sign-in options or Sign in another way near the bottom
  2. Choose Face, fingerprint, PIN or security key
  3. Select iPhone, iPad, or Android device
  4. Scan the QR code that appears with your phones camera App and tap the link that appears
  5. Select your passkey
  6. Complete your phones biometric prompt (Face ID, Finger Print, PIN/Passcode)
  7. Your sign-in should complete. No username or password required.

If you are using a Security Key (like a Yubikey)

  1. Click Sign-in options near the bottom
  2. Choose Face, fingerprint, PIN or security key
  3. Select Security key
    Note:
    macOS users will need to choose More Options, Use Security key and Continue
  4. Insert your security key into a USB port on your computer (if not already inserted) and tap the button on it
    Note: macOS users may need to click Allow after connecting their Security Key and 
  5. Enter the PIN you set when you configured your security key
    Note: macOS users will be prompted to tap the button on their Security Key again
  6. Your sign-in should complete. No username or password required.

FAQ

  • What is the difference between a Security Key and a Passkey?
    • Think of a Security Key as a wallet and a Passkey as a hotel room key card. You can carry multiple hotel room keys (Passkeys) in your wallet (Security Key) but each key only opens one door.
  • Can I store my Passkey in Bitwarden, Lastpass, 1Password, iCloud, Google, etc.?
    • Yes. We do not restrict where you can store your passkey but we only provide support for the Microsoft Authenticator App. If you choose to store your passkey else where you are on your own. If you lose your passkey and get locked out of your account please contact IT for assistance recovering your account.
  • Can I leave my Security Key connected to my computer?
    • If your computer is in a secure office/location you can leave your Security Key connected to your computer. If you work in an open space, we recommend unplugging your Security Key at the end of the day and either locking it up in your desk drawer or taking it with you. They easily fit on a key chain or lanyard.
  • How do I change the PIN on my Security Key?
    • For VIU provided Security Keys please use this KB otherwise please refer to your specific Security Keys manufacturers instructions.
  • I forgot my PIN for my Security Key, how do I recover it?
    • You will need to factory reset your Security Key and remove/re-create any Passkeys you have setup from your accounts. For VIU provided Security Key please us this KB otherwise please refer to your specific Security Keys manufacturers instructions.
  • I lost/damaged/broke my Security Key
    • For VIU provided Security Keys please contact IT to request a new Security Key. Once acquired you will need to remove the old Security Key from your account and setup your new Security Key.
  • My Security Key has been stolen
    • Please report this immediately to the Service Desk so we can remove it from your account to prevent unauthorized access and issue you a new one.
  • I forgot my Security Key and don't have it on me right now, how do I login?
    • See this KB for requesting a Temporary Access Pass (TAP) from the Service Desk
  • How do I use a Security Key with my Phone/Tablet?
    • VIU provided Security Keys work on Phones/Tablets that support NFC (most modern devices). Simply tap your Security Key to your Phone/Tablet when prompted during login. Your device should tell you where to tap it (top, bottom, etc.). If your device does not support NFC, you can plug your Security Key into your phone and use it just like you would on a computer.
  • I don't have a USB-C port (easily accessible) on my PC to connect my Security Key to
    • Please contact IT and they will get you a dongle/adapter
  • Is my biometric data (face, finger print) being stored at VIU?
    • No. Any Passkey that requests biometric data is stored locally on the device that creates the Passkey in its secure enclave which VIU does not have any access to.
  • Can I use more than one Passkey or Security Key on my account?
    • Yes! If you want you can setup a Passkey in the Microsoft Authenticator App, your favorite password manager and have a Security Key associated with your account. Microsoft does not publish a limit on how many Passkeys can be added to your account.
  • Can I use my Security Key for more than one account?
    • Also yes. If you have access to multiple accounts that require 2SV you can use the same Security Key for each of them. The Security Keys that VIU provides can hold up to 100 Passkeys.
  • Can I use my phone's Passkey on a computer lab or classroom computer at VIU?
    • Not at this time. Desktops at VIU do not have Bluetooth and cannot be used with Passkeys stored on phones. We recommend signing in with your username/password instead and choosing the Microsoft Authenticator as your 2SV method or use a Security Key.