Set Up a Passkey (MFA) for Your Microsoft 365 Account

Use this guide to set up a passkey, so you can sign in to Microsoft 365 with your phone's face, fingerprint, or passcode instead of your password.

Before You Start

Your Microsoft 365 work email address and password
An iPhone or Android phone with a screen lock set up (Face ID, fingerprint, or passcode)
A computer with Bluetooth. Check Your Computer for Bluetooth below shows you how to check.
Bluetooth turned on for both your computer and your phone. Keep your phone near your computer during setup and each time you sign in.

First, check your computer for Bluetooth. Then add a passkey using one of the two options below.

Option	Choose it if
Option 1: Save your passkey on your phone	You don't use Microsoft Authenticator.
Option 2: Save your passkey in Microsoft Authenticator	You already use Microsoft Authenticator for your work account, and your phone has iOS 17 or later (iPhone) or Android 14 or later.

On your computer, click Start, type Bluetooth, and open Bluetooth and other devices settings.
Look for the Bluetooth switch at the top of the page. If it says Off, click the switch to turn it On.
If there's no Bluetooth switch, your computer doesn't have Bluetooth. Stop here and set up Microsoft Authenticator instead, using the guide Set Up Microsoft Authenticator (MFA) for Microsoft 365.
On your phone, open Settings and make sure Bluetooth is turned on.

On your computer, open Microsoft Edge or Google Chrome and go to https://mysignins.microsoft.com/security-info. Sign in with your work email if asked.
Click Add sign-in method.
Click Passkey.

NOTE

Choose Passkey, not Passkey in Microsoft Authenticator.
Click Next.

Result: A Windows Security window opens and shows a QR code. If the window asks where to save your passkey, choose iPhone, iPad, or Android device.
On your phone, open the Camera app and point it at the QR code on your computer screen.
Tap the button that appears on your phone's screen (Save a passkey on iPhone).
On your phone, follow the prompt to save the passkey. If it asks where to save it, choose Passwords (iPhone) or Google Password Manager (Android). Confirm with your face, fingerprint, or passcode.

Result: Your phone shows that the passkey is saved.
On your computer, on Let's name your passkey, keep the suggested name and click Next.
On Passkey created, click Done.

Result: Your Security info list now shows Passkey (Synced).

On your computer, open Microsoft Edge or Google Chrome and go to https://mysignins.microsoft.com/security-info. Sign in with your work email if asked.
Click Add sign-in method.
Click Passkey in Microsoft Authenticator.
Click Next.

Result: The page changes to Finish creating your passkey in Authenticator. Leave it open. You'll come back to it after the steps on your phone.
On your phone, open Microsoft Authenticator and tap your work account (your work email address).
Tap Create a passkey.
On Let's create your passkey, tap Sign in.
Enter your work password and tap Sign in.
When Approve this sign-in? appears, tap Approve. If you're asked for a number, enter the number shown on your screen.
On Turn on AutoFill in Authenticator on the next screen, tap Continue.
Tap Turn On. If you're asked, confirm with your face, fingerprint, or passcode.

NOTE

On Android, follow the prompt to turn on Authenticator as a passkey provider.
On Passkey created, tap Done.
On your computer, click Next on the Finish creating your passkey in Authenticator page.

Result: Passkey created appears. Click Done. Your Security info list now shows Passkey (Device-bound).

On your computer, open a web browser and go to https://outlook.cloud.microsoft/mail/
Enter your work email address and click Next.
On Enter password, click Use your face, fingerprint, PIN, or security key instead.

NOTE

If you see Face, fingerprint, PIN or security key instead of the password page, skip to the next step.
If a Windows Security window asks you to choose a passkey, click iPhone, iPad, or Android device.

Result: The window shows a QR code.
On your phone, open the Camera app and point it at the QR code.
Tap the button that appears on your phone's screen (Sign in with a passkey on iPhone).
Follow the prompt on your phone to use your passkey (on iPhone, tap Use Passkey), and confirm with your face, fingerprint, or passcode.

Result: Your computer finishes signing in and opens Outlook.

If Something Goes Wrong

Your phone shows Connecting… and never finishes

Make sure Bluetooth is turned on for both your computer and your phone, and keep your phone close to the computer. Then try again.