MFA: Adding Sign-in Method - Windows Hello on Personal Computer

Summary

This article walks you through adding a Windows Hello passkey for login to your USNH account on your personal Windows computer. A Windows Hello passkey is stored on your device and lets you sign in using your PIN, fingerprint, or face recognition.

Note: Windows Hello passkeys are device-bound. They are tied to this specific computer and will not be available on other devices. We recommend also setting up a backup sign-in method on a different device, such as the Microsoft Authenticator app on your phone.

For USNH-managed Windows computers, see Windows Hello: Configuring Windows Hello for Business on Managed Windows Computers 

 

How-To

Before you begin

You will need a personal Windows computer with Windows Hello already configured. For instructions, see the Microsoft Support article - Configure Windows Hello  

 

Task: Register a Windows Hello passkey on your personal computer

Instructions

Step 1 - On your personal Windows computer, open your browser and go to myaccount.microsoft.com . Sign in if prompted.

Step 2 - In the left hand navigation panel, expand My Account then choose Security Info. The Security Info page times out very quickly for security purposes. If prompted, sign in again. 

Step 3 -  Click Add sign-in method.

Security info with list of MFA sign-in methods and link to Add sign-in method.

 

Step 4 - Select Passkey (not the "Passkey in Microsoft Authenticator" option), then click Add.

Add sign-in passkey options.

 

Step 5 - In the "Sign in faster with your face, fingerprint, or PIN" dialog, click Next.

Step 6 - In the "Save your passkey" box, click Continue.

  • If you are using Google Chrome and are prompted to save the passkey to Google Password Manager instead of Windows Hello, select Save another way to switch to Windows Hello.

Step 7 - In the "Enter your PIN" box, enter your Windows Hello PIN for your personal Windows computer.

Step 8 - In the "Let's name your passkey" box, enter a name for your passkey, for example "Home PC" or "personal laptop," then click Next.

Step 9 - In the "Passkey created" confirmation box, click Done.

Step 10 - You should now see Passkey (Device bound) with the name you gave it listed under your sign-in methods.

 

Outcome

You have successfully added a Windows Hello passkey for your personal Windows computer as an MFA sign-in method. If this is the only sign-in method on your account, we recommend adding a second one on a different device before you finish. See other Multi-Factor Authentication (MFA) articles in our Knowledge Base (KB).

If your computer is older and does not have a modern enough Trusted Platform Module (TPM) chip, Windows may not be able to save the passkey to Windows Hello. You will be prompted to set up an alternative MFA type instead.

 

Further Readings

Windows Hello: Configuring Windows Hello for Business on Managed Windows Computers 

Multi-Factor Authentication (MFA) KB articles

Configure Windows Hello  - Microsoft Support

 

Need additional help?

Visit the Technology Help Desk Support page to locate your local campus contact information or to submit an online technology support request.  For password issues you must call or visit the Help Desk in person. 

Print Article