---
title: "Setting Up a Passkey for 2FA"
canonical: "https://kb.uconn.edu/space/IKB/27995996173/Setting%20Up%20a%20Passkey%20for%202FA"
format: markdown
---
Passkeys are a secure authentication method that you can use with Duo 2FA. With a passkey, you can use the authentication tools built into your device including facial and fingerprint biometrics. Your passkey can work in place of the traditional Duo verification texts that are sent to your mobile device. This can enable faster logins and reduce the complexity of using a second device for login.

> ℹ️ Passkeys are supported at UConn, but the Duo Mobile app is the preferred method for 2FA. For more info, see this article: [Setting up the Duo Mobile App](https://uconn.atlassian.net/wiki/spaces/IKB/pages/10789815076)

## Set up a passkey

1. Log into [https://uconn.login.duosecurity.com/devices](https://uconn.login.duosecurity.com/devices) with your UConn email and password.
2. Select **Add a device**.
3. Select the passkey option specific to your device. This may be called Windows Hello, Touch ID, Face ID, platform authenticator, etc.
4. Continue to the next page to verify your authentication method. This will vary depending on your platform. On most platforms, a window will pop up to verify your identity and ask to save the passkey.
5. When you receive notification that the method was added, the process is complete.

## How does a passkey work?

When you log into a UConn page like HuskyCT, you are prompted to enter your password. Once it is entered, you are asked to verify with a second method. For most users, this is by approving a login prompt sent to your mobile device or entering a temporary code sent via SMS. These are some of the options provided by Duo for two-factor authentication.

Passkeys offer another option. When you use a passkey, you grant your device permission to share its “private key” with Duo to see if it matches Duo’s “public key” for your account. You can think of this as Duo acting as a security guard at a door who needs a secret phrase/code that only your device knows. By authenticating, you grant your device permission to whisper that secret phrase to Duo, which then opens the door for you. This private key is only stored on *your* devices and only works if you authenticate with your device’s passkey features, which vary by brand and model. On an iPhone, this could be Face ID or Touch ID. On a Windows computer, this may be a face scan or a fingerprint scan through Windows Hello. See below for a demonstration of how a passkey will work on your device.

## Limitations

- Passkeys work only on your device. **If you sign in on a public computer or your friend’s computer, you will not be able to use your passkey. **Some platforms will allow you to sync your passkey among your devices. For example, an iPhone and a Mac signed into the same Apple Account can share a passkey.
- Passkeys do not work on certain applications. These include commonly used applications such as LockDown Browser and Microsoft Remote Desktop.
- Some browsers do not accept passkeys set up in other browsers. For example if you set up a passkey on Google Chrome, you might not be able to use it on Firefox even if you are on the same device.

> ✅ To avoid these issues, you should [add another authentication method](https://uconn.atlassian.net/wiki/spaces/IKB/pages/10784508210) **in addition to your passkey**. You can use your passkey on devices and services that support it, but then use your other method in other situations.