This article outlines how to set up and use one of the options for multifactor authentication (MFA) at UMass Amherst. More about MFA and other authentication methods you can use

About Passkeys in the Microsoft Authenticator App 

This method is recommended for most people. Finish logging in by scanning a QR code with your smartphone or mobile device. 

• Phishing-resistant.
• Requires a smartphone with an internet connection (e.g. cellular or wifi).
• Can be configured for passwordless login. 
• Not compatible with Self-Service Password Reset (choose two other methods). 

 

First Step: Install And Set Up The Microsoft Authenticator App 

Install the Microsoft Authenticator app and add your UMass Amherst account to get started. Follow our guide 

 

Create A Passkey In The Microsoft Authenticator App 

Note: If you set up the Microsoft Authenticator app using the smartphone-only sign in method instead of by scanning a QR code, a passkey may have been set up automatically,  and you can log into services using the instructions in the next section.  

1. In the Microsoft Authenticator app on your mobile device, tap on your UMass Amherst account.  
2. Under Other Ways to Sign In, tap Create a passkey.  
3. If prompted to autofill passwords and passkeys, tap Turn On. 
4. On the Let’s create your passkey screen, tap Sign in.  
5. If prompted, enter your password, and complete MFA with an existing method.  
6. Follow your device’s authentication prompts (e.g. facial recognition, fingerprint, PIN, etc.).  
7. On the Passkey created screen, tap Done. 

Enable Passkey Autofill

iPhone/iPad

1. Open the Settings app and go to Settings > Passwords > Password Options (iOS 17) or Autofill & Passwords (iOS 18 and newer). 
2. Turn on Autofill Passwords and Passkeys. 
3. Under Autofill From, turn on Authenticator.  

Android

Exact steps may vary by device vendor and operating system version.  

1. Open your device’s Settings app.  
2. Go to Passwords / Accounts.  
3. Enable Authenticator as a passkey provider.  

 

Log In Using Passkey Stored In Microsoft Authenticator App 

You can use the passkey stored in your Microsoft Authenticator app to log into UMass Amherst services. For example, while logging into SPIRE on a computer:  

1. Go to spire.umass.edu and click Log in to SPIRE. 
2. Enter your NetID email [NetID]@umass.edu and click Next. 
3. If prompted to Choose a Passkey, select iPhone, iPad or Android device.  
   If prompted to Sign in, select Scan QR Code.  
   If prompted to allow Bluetooth, select Allow.  
4. Scan the QR code using your mobile device camera app, or the Microsoft Authenticator app.  
5. If prompted, tap Use Passkey.  
6. Follow your device’s authentication prompts (e.g. facial recognition, fingerprint, PIN, etc.). 
7. If you are using a computer only you access, click Yes to Stay signed in. Do not use this option on public or shared computers. 

 

Add, Change, or Remove Multifactor Authentication Options 

Go to mysignins.microsoft.com/security-info to add or delete authentication methods and to set a default option.