OVERVIEW
Target audience: All McGill faculty, staff, students, as well as retirees and alumni who have enrolled in 2FA.There are multiple ways to authenticate and securely sign in to your McGill account using two-factor authentication (2FA). In this article:
- Sign in using Microsoft Authenticator
- Sign in using a passkey:
- Passkey on Windows (10 or 11) computer
- Passkey on MacOS
- Passkey on a iPhone, iPad, or Android
- Passkey on a security key (FIDO2)
Sign in using Microsoft Authenticator app
Once you have downloaded and set up the Microsoft Authenticator app on your mobile device, you will use this app to verify your identity when signing in to a McGill online service or application.
To verify your identity:
- Sign in to a McGill online service or application using your McGill username and password.
- A time-sensitive code will appear on your screen.
- On your mobile device, open the Microsoft Authenticate app. A prompt window will appear. Review the following details to make sure it's legitimate:
-
- Account: The account requesting authentication.
- App: The McGill application or service requesting authentication.
- Location: The approximate location of the sign-in request. The location is based on your device’s IP address, so it may not reflect your physical location.
4. Enter the code displayed on your screen into the Microsoft Authenticator app, then click Approve.
5. On your browser, click Yes when asked "Stay signed in?"
Signing in using a passkey
A passkey is a secure way to verify your identity when signing into your McGill account using a trusted device, such as your phone, computer, tablet, or a security key (FIDO2).
Depending on where you have saved your passkey, you can sign in using:
- Windows device: Use your Windows PIN, fingerprint, or facial recognition.
- MacOS device: Use Touch ID (fingerprint) or your Mac login password (Face ID, password, or other method).
- iPhone, iPad, or Android device: Use your mobile device's screen lock, fingerprint, or facial recognition.
- Security key: Use a physical USB or NFC (tap) FIDO2 security key.
- Password manager: Use a passkey saved in password manager, such as Microsoft Password Manager, iCloud Keychain, Google Password Manager, or 1Password.
To sign in using a passkey:
- Go to the McGill application or service you want to access.
- If prompted, enter your McGill username.
- A verification window will appear. It will prompt you with the preferred passkey method.
Note: If your preferred passkey method does not appear, select Choose a different passkey to view other available options.
Expand the corresponding section below for further instructions.
Passkey on Windows device
4. Enter your Windows PIN or use your fingerprint or facial recognition.
5. Follow the on-screen instructions.
Passkey on MacOS device
4. You can either use your:
-
- Mac's or Magic Keyboard's TouchID (fingerprint).
- iPhone or iPad to scan the QR code displayed on your computer screen and follow the prompts.
Passkey on iPhone, iPad, or Android or password manager
4. Select iPhone, iPad or Android device and use your mobile device to scan the QR code displayed on your computer screen.
NOTE
Passkey saved on a iPhone, iPad, or Android, also applies to Passkeys saved in Microsoft Authenticator app.
5. Follow the prompts on your mobile device to verify your identity.
Passkey on security key
A security key (FIDO2) is a small physical device that you plug into or tap against your computer or mobile device to securely sign in to websites and apps. It verifies your identity without requiring a password. It uses FIDO2, a secure authentication technology that helps protect your accounts from unauthorized access and phishing attacks.
Once you have set up a security key (FIDO2):
4. Select Security key.
Note: If you do not see this option, select Choose a different method and select Security key.
5. Your device will open a security window. You can either:
-
- Insert your FIDO2 security key into your device
- Hold it near your device if it is a NFC (Near Field Communicator) key
6. Verify your identity using your fingerprint or PIN when prompted.
