This article outlines how to set up and use one of the options for multifactor authentication (MFA) at UMass Amherst. More about MFA and other authentication methods you can use 

About Windows Hello For Business

This method is recommended for people who use a university-managed Windows computer (e.g. a university-owned work laptop). Save a passkey to your Windows 10 or 11 computer to finish logging in using PIN, fingerprint, or facial recognition.  

• Phishing-resistant.
• Does not require a smartphone or mobile device. 
• Can be configured for passwordless login. 
• Not compatible with Self-Service Password Reset (choose two other methods). 

Group policy changes may be required in order to use Windows Hello for Business with a university-managed computer (e.g. a university-owned work laptop). Check with your area's IT Administrator or reach out to the IT Service Desk for any further assistance. 

 

Set Up Windows Hello 

1. Open the Settings app on your Windows 10 or 11 computer.
2. In the vertical navigation bar on the left, click Accounts.
3. Click Sign-in options.
4. Click on any of the Windows Hello options (facial recognition, fingerprint recognition, or PIN) that are available on your computer and click Set up.
   • For PIN: 
     On the First, verify your account password screen, enter the password you use to sign into your computer and click OK. 
     On the Set up a PIN screen, enter a number you can remember. You can write this down in a password manager. Click OK. 
   • For Fingerprint or Facial recognition: 
     If you see a Welcome to Windows Hello screen, click Get started. 
     If you see a Making sure it’s you screen, enter the information required (e.g. the password you use to log into your computer, or an existing PIN). 
     Follow the prompts to finish setup.

 

Save a Passkey to Your Windows Computer 

Once Windows Hello is set up, you can save a passkey to the computer which you can use to log into services.  

1. On your computer, go to mysignins.microsoft.com/security-info 
2. Click Add sign-in method. 
3. Select Passkey.  
4. On the Sign in faster with your face, fingerprint, or pin screen, click Next.  
5. Once the Windows Security Save Your Passkey dialog is displayed, make sure you see This will be saved to your Windows device at the bottom of the window.  
   If not, click Change. 
6. On the Save your passkey screen, follow prompts to authenticate with the Windows Hello option you set up previously (e.g. facial recognition, fingerprint, or PIN). 
7. On the Let’s name your passkey dialog, enter a name that will help you identify this option later.  
8. Click Next and then Done. 

 

Log In Using Windows Hello 

Once you have saved a passkey to your computer, you can use it to authenticate while logging into UMass Amherst services. For example, while logging into SPIRE:  

1. Go to spire.umass.edu and click Log in to SPIRE. 
2. Enter your NetID email [NetID]@umass.edu and click Next. 
3. If prompted to Choose a Passkey, select the name of your computer and click Next.  
4. Follow prompts to unlock your passkey with Windows Hello (e.g. facial recognition, fingerprint, or PIN).  

 

Add, Change, or Remove Multifactor Authentication Options 

Go to mysignins.microsoft.com/security-info to add or delete authentication methods and to set a default option.