Set Up Microsoft Authenticator and a Passkey 鈥� Android
Loyola recommends two sign-in methods, both in the Microsoft Authenticator app on your Android phone:
- Part A – Microsoft Authenticator: approve sign-in requests or use one-time codes.
- Part B – Passkey in Microsoft Authenticator: sign in with your face, fingerprint, or PIN. Passkeys cannot be phished.
Set up Part A first. It takes about five minutes.
Before you begin
- Your Android phone must have a screen lock (PIN, fingerprint, or face unlock).
- Know your Loyola UVID and password.
- This guide shows setup from a computer, scanning a QR code with your phone.
Part A – Set up Microsoft Authenticator
1. Install the app
Open the Google Play Store, search for Microsoft Authenticator, and tap Install. Make sure the publisher is Microsoft Corporation.
2. Start setup on your computer
On your computer, go to LUC.edu/mfapreferences and sign in with your UVID and password. If you have not set up MFA yet, you will see Let’s keep your account secure. Select Next.
You will be asked to install Microsoft Authenticator. You already did this, so select Next.
The next page tells you to set up your account in the app. Select Next to show the QR code.
3. Add your account in the app
Open Authenticator on your phone. If prompted, allow notifications. Tap Add account.
Tap Work or school account.
Tap Scan a QR code. If the app asks for camera access, allow it.
Point your camera at the QR code on your computer screen.
Can’t scan the code? Select Can’t scan the QR code on the computer, or tap Sign in within the app instead of Scan a QR code.
Your Loyola account appears in the app. You may see a message that App Lock is enabled. This means Authenticator will ask for your fingerprint, face, or PIN when you open it. Tap OK.
4. Approve the test sign-in
On your computer, select Next. A two-digit number appears.
Your phone shows Are you trying to sign in? Type the number from your computer screen and tap Yes.
Can’t see the number? Tap I can’t see the number and start the sign-in again.
5. Finish
Your computer shows Authenticator Added. Select Done. Microsoft Authenticator is now your sign-in method.
Part B – Add a passkey in Microsoft Authenticator
1. Turn on Authenticator for passkeys
This requires Android 14 or later. The steps below are for Samsung phones; on other Android phones, look for Passwords, passkeys and autofill or Passwords & accounts in Settings.
Open Settings and tap General management.
Tap Passwords, passkeys, and autofill.
Under All services, turn on Microsoft Authenticator.
Tap OK to confirm.
Microsoft Authenticator is now turned on.
2. Choose Passkey in Microsoft Authenticator
Go to LUC.edu/mfapreferences and sign in. Tap Add sign-in method, then choose Passkey in Microsoft Authenticator.
Read the requirements (Android 14 or later, and the latest version of Authenticator) and tap Next.
The page tells you to finish in the Authenticator app. Leave this page open.
3. Create the passkey in the app
Open Authenticator and tap your Loyola account. Under Other ways to sign in, tap Create a passkey.
On Let’s create your passkey, tap Sign in and sign in with your Loyola account if asked.
If you skipped step 1, Authenticator asks you to turn it on now. Tap Settings, turn on Microsoft Authenticator, then come back to the app.
Confirm with your fingerprint, face, or PIN when your phone asks. The passkey is not created until you do.
Authenticator creates the passkey. This takes a few seconds.
4. Done
When you see Passkey created, tap Done. Authenticator names the passkey for you (for example, Authenticator - Android). Your Security info list now includes Passkey (Device bound).
This passkey stays on this phone. It does not sync to your other devices. If you replace your phone, set up Authenticator and a new passkey on the new phone. If you lose your phone, please contact the ITS Service Desk for support.
Need help?
Contact the ITS Service Desk at 773-508-4487 or ITSServiceDesk@luc.edu.