Summary

This article provides multi-factor authentication (MFA) options available if you do not have a smartphone, if your phone does not meet the minimum requirements for the Microsoft Authenticator app, or if you prefer not to use your phone for MFA. This article explains each option, from most secure to less secure, so you can pick what works best for you.

Before you Begin

Check and Update your Phone

If you have a smartphone but do not know if it is compatible, check its requirements before assuming you need an alternative option.

• iPhone/iPad requires iOS 17.0 or later
  • Update your iPhone or iPad  
• Android requires version 14 or later to store a Passkey, version 8 or later to use the Microsoft Authenticator app.
  • Check & update your Android version  

Even if you have an older smartphone, you can probably install and use the Microsoft Authenticator app for MFA . See MFA: Setting up the Microsoft Authenticator App for M365

If your phone still does not meet the requirements after updating, or you do not have a phone at all, see the options below. 

Non-Phone MFA Options

Option 1: Passkeys on your Computer or Tablet

A passkey is a phishing-resistant sign-in method that replaces a password and MFA code combination with a single sign-in step. There are two kinds, device-bound and syncable.

Device-Bound Passkey (No Phone Required)

A device-bound passkey is stored on one specific device only. It is not synced anywhere else.

• Hardware security key (FIDO2) - see Option 2 below.
• Windows Hello on a Windows 10/11 computer with a fingerprint reader, face camera, or PIN. See
  • MFA: Adding Sign-in Method - Windows Hello on Personal Computer 
  • Windows Hello: Configuring Windows Hello for Business on Managed Windows Computers 
• Apple Passwords on a Mac that supports Touch ID. If you choose not to turn on iCloud sync, then your passkey is device-bound to that computer only. These passkeys can also be synced if iCloud sync is enabled. See MFA: Setting up Passkeys for Microsoft Authentication 
• Microsoft Authenticator Passkey on a compatible tablet. The passkey remains only on the tablet where it was created and does not sync to the cloud or other devices. This Microsoft Authenticator Passkey can be used to authenticate into any device you own or use (as long as you have your tablet with you). See: MFA: Adding Sign-in Method - Passkey in Microsoft Authenticator on Mobile Device  

Syncable Passkey (No Phone Required)

A syncable passkey is stored in a password manager and synced across your signed-in devices.

• Apple Passwords app on a Mac or iPad signed into the same Apple ID with iCloud sync enabled. Your passkey is securely synced through your Apple Account and is available on other compatible Apple devices using the same account for iCloud sync. If you lose, replace, or upgrade your device, your passkey remains available through your Apple Account. See MFA: Setting up Passkeys for Microsoft Authentication 
• Google Password Manager (Chrome). Your passkey is securely synced through your Google Account and is available on other compatible Android or ChromeOS devices synced using the same account. If you lose, replace, or upgrade your device, your passkey remains available through your Google Account.  See: MFA: Setting up Passkeys for Microsoft Authentication 
• A third-party password manager app that supports syncable passkeys, such as 1Password, Bitwarden, KeePass, or LastPass. Your passkey is synced through your password manager and is available across your devices. See: MFA: Setting up Passkeys for Microsoft Authentication 
  • Note:  ET&S has no direct support for password managers. If you have issues, you will need to contact the company directly. That said, you can contact the ET&S Help Desk for a temporary login pass until your issue with the password manager is resolved. 

Option 2: Hardware Security Keys

A hardware security key is a small physical device that plugs into a USB port or taps via NFC (near field communication). It works without a phone, without an app, and without a network connection, and is one of the most phishing-resistant options available. You are responsible for purchasing your own hardware security key(s). ET&S does not provide security keys for students, faculty, or staff.

How It Works

Insert the hardware key into a USB or lightning port, or tap it against your phone or laptop's NFC reader, then touch the key's metal contact when prompted.

Recommended Security Keys

See MFA: Hardware Security Key Purchasing Guide (YubiKey, Kensington)

• For personal use any hardware security key from Yubico  or Kensington  should be sufficient. 
• Recommended security keys can be purchased from the manufacturer, from popular online vendors, or through the USNH UShopNH portal  in the Connection punchout under Adapters & Accessories.  ET&S does not provide security keys for students, faculty, or staff.
• If you have special security requirements, federal grant requirements, or security-related questions, submit a General Cybersecurity Request explaining your needs.

Once You Have a Key

See MFA: Setting up YubiKey for Microsoft Authentication to register a passkey to your hardware key. 

Option 3: Third-Party Authenticator App (Last Resort)

If you have a computer but no smartphone, a phone that doesn't meet the Microsoft Authenticator app's requirements, and no hardware security key, Microsoft MFA accepts verification codes from third-party apps that support the OATH-TOTP standard, the same standard used to generate 6-digit rotating codes.

Requirements

• The app must generate OATH-TOTP codes (6-digit codes that refresh every 30 to 60 seconds).

Examples of Compatible Apps

• Google Authenticator
• 1Password (with its built-in authenticator field)
• Bitwarden (with its built-in authenticator field)
• Any other app that supports standard TOTP codes

Non-Phone MFA Options at a glance

Further Readings

MFA: Setting up the Microsoft Authenticator App for M365

MFA: Setting up Passkeys for Microsoft Authentication 

MFA: Adding Sign-in Method - Passkey in Microsoft Authenticator on Mobile Device  

MFA: Adding Sign-in Method - Windows Hello on Personal Computer 

Windows Hello: Configuring Windows Hello for Business on Managed Windows Computers 

MFA: Hardware Security Key Purchasing Guide (YubiKey, Kensington) 

MFA: Setting up YubiKey for Microsoft Authentication 

Update your iPhone or iPad  - Apple support article

Check & update your Android version  - Google support article

Need additional help?

Visit the Technology Help Desk Support page to locate your local campus contact information or to submit an online technology support request.  For password issues you must call or visit the Help Desk in person.