Passkeys: The New Default Way to Sign In to Your M365 Student Account 

Aug. 25, 2026
Print | PDF

As part of Microsoft's ongoing security improvements, Passkeys will become the default sign-in experience beginning Sept. 1, 2026. If you currently use SMS or voice authentication, you will be prompted to register a Passkey when signing in. SMS and voice authentication will be retired on Feb. 1, 2027. 

Passkeys provide a faster, more secure way to sign in and help protect your account from common security threats such as phishing. If you currently use SMS or voice authentication, you will be automatically enabled for Passkey registration and prompted to create a Passkey when signing in, whether you are an undergraduate student, graduate student, or alumni.  

What Is a Passkey?  

A Passkey is a secure way to sign in without entering a code sent by text message or answering a phone call. Instead, it uses a device you already trust, such as:  

  • Your smartphone  
  • Your laptop or desktop computer  
  • A security key (USB or NFC device)  

Passkeys typically work using your device's built-in security features, such as:  

  • Fingerprint recognition  
  • Facial recognition  
  • Device PIN  
  • Security key (optional) 

Since Passkeys are tied to your device and protected by biometric authentication or a PIN, they offer stronger protection than SMS or voice verification.  

How to Create a Passkey for Your M365 Account 

If you would like to create a Passkey in advance of Sept.1, please follow the steps below:  

  • Sign in to https://auth.wlu.ca/MFA. 
  • Select "Enroll in MFA". 
  • Click "Add or update your MFA authentication methods". 
  • Select "Add sign-in method". 
  • Next, choose "Passkey", and follow the prompts on your device to create and register. 

Once configured, you can use your passkey to quickly and securely authenticate to Microsoft 365 services without needing to enter a password. 

After registering a Passkey, you will be able to use it as your primary sign-in method for supported Microsoft 365 services. In most cases, signing in will simply require approving the request with your fingerprint, face recognition, device PIN, or security key.  

Need help? For additional information about multi-factor authentication and account security, visit the Multi-Factor Authentication webpage.  

Questions? Contact the ICT Service Desk for help.