Summary

USNH supports several ways to securely sign in to your USNH Account using MFA. The best option for you may depend on the devices you use and how you prefer to sign in. Whichever method you choose, creating a passkey is easy and should only take a few minutes to complete. 

If you are not sure which option to choose, please see below to find the best matches based on the devices you regularly use. 

Note: Regardless of the MFA method you choose to regularly use, it is highly recommended that you enroll a second method in the event your primary device (smartphone, tablet, hardware security key, etc.) is lost, stolen, or otherwise not available. 

Things to Know

You can have More than One Passkey

You can enroll multiple passkeys for your USNH Account and use whichever one is most convenient at the time you sign in. For example, you could have: 

• A passkey on your Android smartphone 
• A passkey on your Windows computer using Windows Hello 
• A passkey on a hardware security key (such as a YubiKey or Kensington) 

You are Not Locked Into your Choice

If you enroll a passkey and later decide another option works better for you, you can add another passkey or remove one you no longer want to use. 

Only Consider Options for Devices you Have

For example, if you don't use an iPhone or iPad, you can skip that option. If you don't use an Android device, you can skip that option. 

You Do Not have to use Face ID or a Fingerprint

Depending on the device, other options such as a device PIN or passcode are likely available. 

Your Biometric Information Stays on your Device

USNH and Microsoft do not receive your fingerprint, facial recognition information, or device PIN. These stay on your device and are only used to verify that you want to use the passkey saved on that device to sign in. 

Synced Passkeys are Recommended when Available

A passkey synced to the cloud through your Apple or Google Account or password manager can be available on other devices where you are signed in with the same account. This also means your passkeys can remain available if you replace or upgrade your device. 

A Passkey for your USNH Account can be Synced Using a Personal Account

For example, you could sync passkey(s) to one or more of these: 

• Saving a passkey to Apple Passwords on your iPhone will sync it to the personal Apple account you log into your iPhone with. 
• Saving a passkey to Google Password Manager on your Android phone will sync it to the personal Google account you log into your Android phone with. 
• Saving a passkey to a password manager like 1Password, Bitwarden, KeePass, or LastPass will sync it to that service, available where you use your password manager. 

Enroll in Backup MFA Method(s)

Having two or more methods available will allow you to still access your USNH Account if your primary device is lost, stolen, replaced, or otherwise unavailable. 

Which Option Should I Choose?

I want a passkey that stays on my smartphone only 

Choose: Microsoft Authenticator Passkey 

Microsoft Authenticator stores a device-bound passkey on your compatible smartphone or tablet. Unlike a synced passkey, it remains only on the smartphone or tablet where it was created and does not sync to the cloud or other devices. This Microsoft Authenticator Passkey can be used to authenticate into any device you own or use (as long as you have your phone or tablet).

If your phone is lost, replaced, or reset, the passkey will not automatically be available on your replacement device. 

See: MFA: Adding Sign-in Method - Passkey in Microsoft Authenticator on Mobile Device  

I use an iPhone or iPad

Choose: Apple Passwords 

Your passkey is securely synced through your Apple Account and is available on other compatible Apple devices using the same account for iCloud sync. If you lose, replace, or upgrade your device, your passkey remains available through your Apple Account. 

See: MFA: Setting up Passkeys for Microsoft Authentication 

I use an Android phone or tablet 

Choose: Google Password Manager 

Your passkey is securely synced through your Google Account and is available on other compatible Android-based devices using the same account. If you lose, replace, or upgrade your device, your passkey remains available through your Google Account. 

See: MFA: Setting up Passkeys for Microsoft Authentication 

I currently use a password manager 

Choose: 1Password, Bitwarden, KeePass, or LastPass 

If you already use one of these password managers, you can store your USNH passkey there. Your passkey is synced through your password manager and is available across your devices.  

Note:  ET&S has no direct support for password managers. If you have issues, you will need to contact the company directly. That said, you can contact the ET&S Help Desk for a temporary login pass until your issue with the password manager is resolved. 

See: MFA: Setting up Passkeys for Microsoft Authentication 

I want to use my personal Windows computer 

Choose: Windows Hello 

Windows Hello allows you to store a device-bound passkey directly on a supported Windows computer. You can then use your Windows Hello PIN, fingerprint, or facial recognition to verify your identity when signing in. 

Because the passkey is device-bound, it remains on that computer and does not sync to other devices (such as a lab computer or a podium). 

See: MFA: Adding Sign-in Method - Windows Hello on Personal Computer  

I want to use my personal Mac computer 

Choose: Apple Passwords 

If your Mac supports Touch ID, you can use it to verify your USNH Account passkey synced to the Apple Passwords app. Your passkey is securely synced through your Apple Account and is available on other compatible Apple devices using the same account for iCloud sync. If you lose, replace, or upgrade your device, your passkey remains available through your Apple Account. If you choose not to turn on iCloud sync, then your passkey is device-bound to that computer only.

See:  

• MFA: Setting up Passkeys for Microsoft Authentication  
• Sign in to an account on your Mac with a passkey  - Apple Support article 

I use a USNH-managed Windows computer (employees) 

Choose: Windows Hello for Business 

Windows Hello for Business provides device-bound phishing-resistant authentication on supported USNH-managed Windows laptops and desktops. You can use your Windows Hello PIN, fingerprint, or facial recognition to verify your identity. While PIN is always an option, availability of fingerprint and facial recognition depends on your computer's hardware. 

See: Windows Hello: Configuring Windows Hello for Business on Managed Windows Computers  

I use a USNH-managed Mac computer (employees)

Choose: Apple Passwords 

If your Mac supports Touch ID, you can use it to verify your USNH Account passkey synced to the Apple Passwords app. Your passkey is securely synced through your Apple Account and is available on other compatible Apple devices using the same account for iCloud sync. If you lose, replace, or upgrade your device, your passkey remains available through your Apple Account. If you choose not to turn on iCloud sync, then your passkey is device-bound to that computer only.

See:  

• MFA: Setting up Passkeys for Microsoft Authentication  
• Sign in to an account on your Mac with a passkey  - Apple Support article 

I want a separate physical device or a backup authentication method 

Choose: Hardware Security Key (example: YubiKey, Kensington) 

A FIDO2 hardware security key, such as a YubiKey or Kensington, stores your device-bound passkey directly on a physical key which can be used without relying on your smartphone or computer. 

A security key is also a great option for a secondary or backup authentication method. If you normally use a passkey stored on your smartphone, a registered security key provides another way to access your USNH Account if your primary device is lost, damaged, or otherwise unavailable. 

Security keys are typically inserted into a USB slot on your computer or phone (depending on whether you have a USB-A or USB-C type). Many security keys also support Near Field Communication (NFC) which is a contactless technology similar to tap-to-pay. If your smartphone supports NFC, you can sign in directly on your device by simply holding the key against your phone. 

See:  

• MFA: Hardware Security Key Purchasing Guide (YubiKey, Kensington) 
• MFA: Setting up YubiKey for Microsoft Authentication  

I prefer to continue entering my password 

Choose: Microsoft Authenticator Number Matching 

If you are not required to use phishing-resistant MFA, you can continue signing in with your USNH password and approve the sign-in using Microsoft Authenticator. 

Push notifications or number matching provide strong MFA but are not phishing-resistant because your password is still used during sign-in. 

See: MFA: Setting up the Microsoft Authenticator App for M365 

I want to receive a phone call or text message 

Choose: Any of the alternate methods listed above 

As of November 2, 2026, telephone methods will no longer be approved methods for authentication. Phone calls and SMS/text messages will no longer be available. 

Further Readings 

Multi-Factor Authentication (MFA) - articles in our Knowledge Base (KB) 

MFA: Setting up Passkeys for Microsoft Authentication 

MFA: Adding Sign-in Method - Passkey in Microsoft Authenticator on Mobile Device  

MFA: Adding Sign-in Method - Windows Hello on Personal Computer  

MFA: Setting up the Microsoft Authenticator App for M365 

Windows Hello: Configuring Windows Hello for Business on Managed Windows Computers

MFA: Hardware Security Key Purchasing Guide (YubiKey, Kensington) 

MFA: Setting up YubiKey for Microsoft Authentication  

Sign in to an account on your Mac with a passkey  - Apple Support article 

Need additional help? 

Visit the Technology Help Desk Support page to locate your local campus contact information or to submit an online technology support request.  For password issues you must call or visit the Help Desk in person.