Multi-Factor Authentication (MFA) is an additional security step that requires you to verify your identity when signing in. This helps protect your account even if someone knows your password.

A Passkey is a more secure way to sign in that uses your device's built-in security features, such as your fingerprint, face recognition or PIN, instead of a password or verification code.

Passkeys are easier to use and provide stronger protection against phishing attacks than traditional MFA methods such as SMS and Authenticator codes.

If your passkey is not working, there are several common issues you can check before contacting support.

First, confirm that you are using the device that contains your passkey, or if using a synchronised passkey, that you are signed in to the correct cloud password manager account (such as iCloud Keychain, Google Password Manager or Samsung Pass).

You should also:

• Ensure Bluetooth is enabled on both your smartphone and computer
• Confirm both your device has an active internet connection.
• Restart your device and try signing in again.
• Ensure your device's operating system and browser are up to date. (Try using Microsoft Edge if using a third party browser)
• If you recently changed or replaced your device, verify that your passkey was successfully transferred or synchronised.

If you have access to another registered authentication method or backup passkey, try using that method to sign in and review your security settings.

If the issue persists and you cannot access your account, please contact the IT Service Desk or Library for assistance.

Passkeys are supported on most modern smartphones, tablets and computers. To create and use a passkey, your device must be running a supported operating system and have a screen lock, PIN, fingerprint or facial recognition configured.

As a general guide:

• Apple iPhone and iPad: iOS/iPadOS 16 or later
• Android devices: Android 9 or later
• Windows devices: Windows 10 or Windows 11 with Windows Hello configured
• Mac computers: macOS Ventura (macOS 13) or later

For the best experience and security, UWA recommends keeping your device and web browser updated to the latest available version.

Support can vary depending on your device model, operating system version and available security features such as facial recognition, fingerprint authentication or a device PIN. If passkeys are not supported on your device, you may still be able to use another authentication method, such as Microsoft Authenticator, Windows Hello or a compatible security key.

Passkeys allow you to sign in more securely and, for most supported sign-in experiences, can replace the need to enter your password. In many cases, you will simply enter your username and then verify your identity using your device's fingerprint, face recognition, PIN or security key.

However, some UWA services, applications and account management tasks may still require your UniID password. For this reason, you should continue to maintain a secure password and remember it, even if you primarily use a passkey for everyday sign-ins.

Over time, more services are expected to support passwordless authentication, making sign-in simpler and more secure.

Yes. You can register multiple passkeys to your account, such as a passkey on your mobile phone, a security key, or a passkey stored in a password manager.

Some passkeys can also be securely synchronised across trusted devices using services such as Apple iCloud Keychain or Google Password Manager, allowing you to use the same passkey on multiple devices.

Having more than one passkey is recommended, as it provides a backup option if you lose access to your primary device.

A backup (synced) passkey is an additional passkey stored and synchronised through a trusted cloud password manager, such as Apple iCloud Keychain, Google Password Manager or Samsung Pass.

Registering a backup (synced) passkey helps ensure you can continue accessing your UWA UniID account if your primary device is lost, stolen, damaged or replaced. As long as you still have access to the underlying cloud password manager account, your synchronised passkeys can be used on your new or replacement device.

Using a backup (synced) passkey is recommended as it provides an additional recovery option and can help reduce the risk of being locked out of your account when changing devices.

If you have replaced, lost or no longer have access to your phone, you may still be able to access your account using a backup (synced) passkey or another registered authentication method.

If your authentication methods did not transfer to your new device, you may need to register a new passkey or update your security information.

If you cannot access any of your registered authentication methods, please contact the IT Service Desk for assistance.

Refer to the Manage Your MFA and Passkeys guides above for step-by-step instructions.

While a smartphone provides the most common, and easiest, way to use MFA and passkeys, it is not the only option available.

Depending on your circumstances, you may be able to use:

• Windows Hello on a UWA-managed Windows device, allowing you to sign in using facial recognition, a fingerprint or a PIN.
• A physical security key (such as a YubiKey) if you already own a compatible device and wish to use it to protect your account.

If you do not have access to a smartphone and are unsure which option is best for you, please contact the IT Service Desk for advice and assistance. They can help determine the most suitable authentication method based on your individual circumstances.

Microsoft has announced the retirement of Microsoft-provided SMS and voice authentication from February 2027. Users must move to passkeys or another supported authentication method before this date.

Windows Hello is a built-in feature available on supported Windows devices that allows you to securely sign in using facial recognition, a fingerprint or a PIN instead of a password.

When configured on a UWA-managed, Windows Hello can be used as a phishing-resistant authentication method, helping to protect your account from password theft and phishing attacks. Because the authentication is tied to your specific device, your biometric information never leaves the device and is not shared with UWA.

A security key is a small hardware device, such as a YubiKey, that can be used to securely verify your identity when signing in.

Security keys are not provided by UWA, but if you already own a compatible security key and would like to use it to protect your UniID account, you can register it as an authentication method. Security keys provide strong phishing-resistant protection and can be a useful option for users who prefer not to use a smartphone or who want an additional backup authentication method.

Many security keys connect via USB, NFC or Bluetooth and can be used across multiple compatible devices and services.