Using Passkeys for Google 2-Step Verification

The best-in-class of all the Google 2-step verification methods, passkeys are easy but also incredibly phishing-resistant. They are like secret digital "keys" that you keep on your devices, working in partnership with the same technology you use to unlock your phone or laptop. They're superior to other well-known Google 2-step methods like SMS, codes, or calls because passkeys can't be used by hackers.

Passkeys use your Face ID, Touch ID, or PIN number authentication on your mobile and laptop devices as a second factor for your Google Workspace Account.

Everyone with a WFU account is encouraged to add at least two passkeys to their account.

Ready to get started? Here’s how:

1. Set up your device passkey
   macOS: Set up Touch ID

   1. Click on Apple Icon in top left corner of screen and select System Settings.
      
      
   2. Scroll down and select Touch ID & Password on the left-hand side. Select Touch ID.
      
      
   3. Follow the prompts to complete the setup.

   If you would prefer not to use your fingerprint to set up a Passkey on your Mac, please see the non-biometric Passkey instructions

   Windows: Set up Windows Hello (PIN, face, and fingerprint recognition)

   1. Open Settings and go to Accounts.
      
      
      
   2. Select Sign-in options.
      
   3. You will need to set a 6 digit PIN to enable Windows Hello. First set up a PIN and then follow the prompts to set your preferred Windows Hello method.
      
      

   iOS, iPad OS: Set up Face ID or Touch ID

   1. Open Settings.
   2. Navigate to Face ID & Passcode (or Touch ID).
   3. Follow the prompts to register your biometrics.

   For more information, see Apple's instructions on setting up Face ID or Touch ID

   Android: Create a screen lock

   1. Open Settings.
   2. Tap Security or Lock Screen.
   3. Set up a PIN, pattern, or biometric lock.

   For more information, see Google's instructions for creating a screen lock.

   I do not want to use biometric data to create a Passkey. What are my options?

   On a Windows device, you may use the Windows Hello PIN option instead of using a fingerprint or facial recognition.

   If you have a Mac computer and would prefer to gain the security benefits of a passkey without using your fingerprint, follow these steps:  copy link 

   
   

   1. Open this link in Google Chrome (recommended for the best experience with Google Workspace): https://myaccount.google.com/signinoptions/passkeys

   2. Sign in to your WFU Google account.

   3. On the Passkeys and security keys page, click Create a passkey.

   

   4. Click Create a passkey(again).

   5. When prompted to turn on iCloud Keychain, click Cancel.

   

   6. When asked where to save your passkey for google.com , choose Your Chrome profile.

   

   7. Click Continue.

   

   8. Click Use Password...

   

   9. On the Passkey created page, click Done.

   

2. Create a passkey in your Google account

   • In your preferred browser, signed into your WFU Google account, navigate to the page to Set up passkeys.
     
     
     

3. Google will walk you through setting up your passkey in a few simple clicks.

   Mac users may be prompted to choose where to save your passkey

   You may be prompted to turn on the iCloud Keychain. If you select Turn On and are not logged into an iCloud account, you will be asked to then sign into or sign up for an iCloud account. Please see Pros and Cons of Using an iCloud Account for more information.

   If you do not wish to use the iCloud Keychain feature, or sign up for an iCloud account, click Cancel.

   
   
   

   You will then be prompted to select where to save your passkey:

   

   If you are signed into an iCloud account, you may go ahead and choose to save your passkey to the iCloud keychain if you would like.

   Otherwise, we suggest saving the passkey to the Chrome profile.

4. Set up a passkey on another device (like your phone) as a backup. Click Create a Passkey.

   • Click Use another device.
   • (If prompted to insert a security key, click Change. Click iPhone, iPad, or Android device.)
   • This will open a QR code.
   • Open the camera on your phone and view the QR code.
   • Follow the instructions to add a passkey to your phone.
   • When you receive confirmation on your computer, click Done.

That's it! Next time you need to log into new sessions with your WFU account, instead of a phone call, SMS text, or prompt, use your passkey.

Your other 2-step methods will still be there, if you ever need them.

If you would like help setting up your passkey or have questions along the way, contact our team via chat at the window to the right, call us at 758-HELP, send an email to [email protected], or drop by The Bridge on the main floor of ZSR library.

Passwordless Logins