Using passkeys for Google 2-step verification

The best-in-class of all the Google 2-step verification methods, passkeys are easy but also incredibly phishing-resistant. They are like secret digital "keys" that you keep on your devices, working in partnership with the same technology you use to unlock your phone or laptop. They're superior to other well-known Google 2-step methods like SMS, codes, or calls because passkeys can't be used by hackers.

Passkeys use your Face ID, Touch ID, or PIN number authentication on your mobile and laptop devices as a second factor for your Google Workspace Account.

Everyone with a WFU account is encouraged to add at least two passkeys to their account.

Ready to get started? Here's how:

1. Set up your device passkey
   macOS: Set up Touch ID

   1. Click on the Apple icon in the top left corner of your screen and select System Settings.
      
      
   2. Scroll down and select Touch ID & Password on the left-hand side. Select Touch ID.
      
      
   3. Follow the prompts to complete the setup.

   Unsure where your Touch ID sensor is located? See our guide on locating your Mac's Touch ID sensor.

   If you would prefer not to use your fingerprint to set up a Passkey on your Mac, please see the non-biometric Passkey instructions.

   Windows: Set up Windows Hello (PIN, face, and fingerprint recognition)

   1. Open Settings and go to Accounts.
      
      
      
   2. Select Sign-in options.
      
   3. You will need to set a 6 digit PIN to enable Windows Hello. First set up a PIN and then follow the prompts to set your preferred Windows Hello method.
      
      

   Unsure where your fingerprint sensor is located on your Windows laptop? See our guide on locating your fingerprint sensor.

   iOS, iPadOS: Set up Face ID or Touch ID then enable iCloud Keychain Sync

   Set up Face ID or Touch ID:

   1. Open Settings.
   2. Navigate to Face ID & Passcode (or Touch ID).
   3. Follow the prompts to register your biometrics.

   For more information, see Apple's instructions on setting up Face ID or Touch ID.
   
   

   iCloud Keychain Sync is disabled on iOS devices by default. It must be enabled to allow for saving passkeys to the iCloud Keychain on these devices. Here is how to set up iCloud Keychain Sync:

   Step 1: Enable iCloud Keychain Sync

   1. Open the Settings app on your iPhone.
   2. Tap your Apple Account (Your Name) at the top of the screen.
   3. Tap iCloud.
   4. Under the "Saved to iCloud" section, tap Passwords (or Passwords and Keychain on older iOS versions).
   5. Toggle the switch to enable Sync this iPhone.

   

   Step 2: Allow the Passwords App to AutoFill

   1. Return to the main Settings menu.
   2. Navigate to General > AutoFill & Passwords.
   3. Under the "AutoFill From:" section, the Passwords app will now be visible.
   4. Tap Passwords to place a checkmark next to it, authorizing it to manage your passkeys.

   Step 3: Retry the Passkey Setup

   1. On your computer screen, cancel the current setup and restart the passkey creation process to generate a fresh QR code.
   2. Scan the new QR code using your iPhone's camera.
   3. Tap the yellow Save a passkey button that appears on your phone screen.
   4. Authenticate with Face ID or Touch ID to successfully save the passkey to your device.

   For more information, see Apple's instructions on setting up iCloud Keychain.
   
   If you do not want to use the iCloud Keychain, you may use a third party password manager like Bitwarden or 1password instead. If these are already installed on your device, you should be prompted to save a passkey to them when creating a passkey.

   Android: Create a screen lock

   1. Open Settings.
   2. Tap Security or Lock Screen.
   3. Set up a PIN, pattern, or biometric lock.

   For more information, see Google's instructions for creating a screen lock.

   I do not want to use biometric data to create a passkey. What are my options?

   On a Windows device, you may use the Windows Hello PIN option instead of using a fingerprint or facial recognition.

   If you have a Mac computer and would prefer to gain the security benefits of a passkey without using your fingerprint, follow these steps:

   
   

   1. Open this link in Google Chrome (recommended for the best experience with Google Workspace): Google Passkeys

   2. Sign in to your WFU Google account.

   3. On the Passkeys and security keys page, click Create a passkey.

   

   4. Click Create a passkey (again).

   5. When prompted to turn on iCloud Keychain, click Cancel.

   

   6. When asked where to save your passkey for google.com, choose Your Chrome profile.

   

   7. Click Continue.

   

   8. Click Use Password...

   

   9. On the Passkey created page, click Done.

   

2. Create a passkey in your Google account

   • In your preferred browser, signed into your WFU Google account, navigate to the page to set up passkeys.
     
     
     

3. Google will walk you through setting up your passkey in a few simple clicks.

   Mac users may be prompted to choose where to save your passkey

   You may be prompted to turn on the iCloud Keychain. If you select Turn On and are not logged into an iCloud account, you will be asked to then sign into or sign up for an iCloud account. Please see our guide on the pros and cons of using an iCloud account for more information.

   If you do not wish to use the iCloud Keychain feature, or sign up for an iCloud account, click Cancel.

   
   
   

   You will then be prompted to select where to save your passkey:

   

   If you are signed into an iCloud account, you may go ahead and choose to save your passkey to the iCloud keychain if you would like.

   Otherwise, we suggest saving the passkey to the Chrome profile.

4. Set up a passkey on another device (like your phone) as a backup. Click Create a Passkey.

   • Click Use another device.
   • (If prompted to insert a security key, click Change. Click iPhone, iPad, or Android device.)
   • This will open a QR code.
   • Open the camera on your phone and view the QR code.
   • Follow the instructions to add a passkey to your phone.
   • When you receive confirmation on your computer, click Done.

That's it! Next time you need to log into new sessions with your WFU account, instead of a phone call, SMS text, or prompt, use your passkey.

If you would like help setting up your passkey or have questions along the way, contact our team via chat at the window to the right, call us at 758-HELP, send an email to [email protected], or drop by The Bridge on the main floor of ZSR library.

Passkey FAQs

For additional questions, please see our passkey frequently asked questions page.

For issues setting up or using passkeys, please see our passkey error troubleshooting page.

Passwordless logins