Passkey requirements

Supported devices:

• Computers running at least Windows 10, macOS Ventura, ChromeOS 109, or up
• Phones running Android 9, iOS 16, or up
• A hardware security key that supports the FIDO2 protocol

If your device meets the above requirements, make sure the device you are trying to enable passkeys on has a PIN, fingerprint, or facial recognition already enabled on the device.

• In the case of a phone, turn on the phone's lock screen.
• In the case of a Windows computer, make sure that Windows Hello is enabled.
• In the case of a Mac computer, make sure Touch ID is enabled.

For more information on setting up PIN, fingerprint, or facial recognition on your device, please see Make Your Account Phishing Resistant: Switch to Passkeys.

If your device does not meet the requirements (for example, you are using Linux and/or have an older smartphone) please reach out to the Service Desk for assistance.

When attempting to save a passkey to your iPhone by scanning a QR code, you may receive a prompt to "Choose how to manage your passkeys".

If you follow this prompt to your settings and find that there are no apps available to select under the "AutoFill From:" section, your device currently lacks an authorized secure vault to store the passkey.

This issue occurs because iCloud Keychain syncing is disabled on your iPhone. Apple's built-in Passwords app requires iCloud Keychain to securely generate, store, and sync passkey data. Until this sync is enabled in your Apple Account settings, iOS prevents the Passwords app from acting as an available AutoFill provider.

Third-party password managers (such as 1Password or Bitwarden) can also act as your AutoFill provider if you do not want to use Apple's built-in Passwords app. Once installed on the phone, they should be available in the AutoFill & Passwords section.

How to correct this issue

Step 1: Enable iCloud Keychain Sync

1. Open the Settings app on your iPhone.
2. Tap your Apple Account (Your Name) at the top of the screen.
3. Tap iCloud.
4. Under the "Saved to iCloud" section, tap Passwords (or Passwords and Keychain on older iOS versions).
5. Toggle the switch to enable Sync this iPhone.

Step 2: Allow the Passwords App to AutoFill

1. Return to the main Settings menu.
2. Navigate to General > AutoFill & Passwords.
3. Under the "AutoFill From:" section, the Passwords app will now be visible.
4. Tap Passwords to place a checkmark next to it, authorizing it to manage your passkeys.

Step 3: Retry the Passkey Setup

1. On your computer screen, cancel the current setup and restart the passkey creation process to generate a fresh QR code.
2. Scan the new QR code using your iPhone's camera.
3. Tap the yellow Save a passkey button that appears on your phone screen.
4. Authenticate with Face ID or Touch ID to successfully save the passkey to your device.

There may be times when you receive an error when attempting to use your passkey. These errors may include the passkey prompt not appearing or the page failing to log you in after you provide your passkey.

The recommendation for when the passkey does not prompt or is not recognized is to remove the passkey and re-add it. This is why it is recommended to have multiple passkeys on your WFU account. That way you may remove and re-add a trouble passkey without getting locked out of your account.

Make sure you have a second or alternate passkey enabled before removing a passkey.

Removing a passkey without having a second passkey will cause a disruption to the account.
If you are unable to add an alternative passkey, please contact us at the Service Desk for help.

Removing and re-adding a passkey

1. Click on your Profile Icon in Gmail and select "Manage your Google Account":
   
   
   
   
2. Click on Security & sign-in on the left, scroll down, and then select Passkeys and security keys:
   
   
   
   
3. Select the Passkey you want to delete and click the X button on the right:
   
   
   
   
4. In the remove this passkey message that appears, click Remove:
   
   
   
   
5. Passkey was removed message will appear at the bottom of the screen when the passkey is successfully removed:
   
   
   
   
6. Follow the instructions in Make Your Account Phishing Resistant: Switch to Passkeys to re-add your passkey.

If you have a passkey on your phone and are using it to log into a different device, such as a computer, make sure that Bluetooth is turned on and make sure the phone is in close proximity to the other device.

When creating a passkey: The passkey is in time out for up to 7 days before it can be used to make "Critical Account Changes". 

In the 7 day period: You can still use and access your account but you won’t be allowed to update any sensitive information or complete sensitive actions unless you verify it’s you with a trusted passkey. You can approve the new passkey with a trusted passkey, but generally speaking, one does not need to make critical account changes right away, and it's advised to ignore. The issue that is happening is that people are trying to trust a new passkey, without having or using a trusted passkey.

Recommendation: Ignore this and do not try to approve the passkey. It will approve automatically after 7 days. 

To use your passkey on Azure Virtual Desktop:

• On the Azure Virtual Desktop, click Try Another Way to use a one-time security code.
• On the host computer (outside of the virtual desktop) open your web browser and navigate to g.co/sc.
• Navigate the Google Prompt: You may see a screen that looks like an account recovery page. Ignore the "Recover account" button.
• Select your account: Click directly on your email address.
• Log in: Enter your password when prompted.
• Use your passkey: Choose the option to use your passkey.
• Generate your code: Google will provide a security code.
• Return to the Azure Virtual Deskop and enter the code into the field.

For Remote Desktop, both the host computer and the remote computer will need to be on the same network. If you are off campus, you will need to connect to the WFU VPN on your host computer.