Set Up Passkeys (Microsoft 365)¶
Work accounts only
OVES @omnivoltaic.com — not personal or school Microsoft accounts.
Before you start
You can sign in today with password + MFA. Keep those methods until a passkey sign-in works at least once.
Add a passkey¶
1 — Sign in
Sign in with your work email (e.g. you@omnivoltaic.com).
2 — Open Security info
3 — Add a method
Select + Add sign-in method (or Add a method).
4 — Choose passkey
Pick Passkey, Face, fingerprint, PIN, or security key, or Security key — whichever appears.
5 — Complete on your device
::: tabs
Approve with Windows Hello — PIN, face, or fingerprint.
Approve with Touch ID or your Mac login password.
Use Face ID, fingerprint, or device PIN. From a desktop browser you may need to scan a QR code on your phone.
Insert or tap your FIDO2 key and set its PIN.
Microsoft security key steps →
:::
6 — Name it
Use a name you will recognise later, e.g. OVES laptop – Windows Hello, MacBook Touch ID, YubiKey 5C.
7 — Confirm
Check the new passkey appears on the Security info list.
Keep your existing methods
Do not remove password, Authenticator, or phone until you have signed in successfully with a passkey at least once.
No passkey option under Add method?
Contact Software with a screenshot of your Security info page.
Add a second passkey¶
Recommended — so you are not locked out if one device is lost or replaced.
1 — Use another device
On a second laptop, phone, or FIDO2 key you use for work, sign in with password + MFA.
2 — Repeat setup
Follow Add a passkey above (Security info → Add method → complete prompts).
Sign in with your passkey¶
1 — Work email
Enter your OVES email at the Microsoft sign-in screen.
2 — Sign-in options
Select Sign-in options, Other ways to sign in, or Use a passkey.
3 — Approve
Choose your passkey and complete Windows Hello, Touch ID, key PIN, or phone prompt.
Try these apps after setup:
| App | Open |
|---|---|
| Outlook | outlook.office.com |
| Microsoft 365 | microsoft365.com |
| Teams | teams.microsoft.com |
| Doc Hub | docs.omnivoltaic.com |
MFA may still appear
Some sign-ins may still ask for MFA until Software adjusts organisation policy.
Microsoft Authenticator (optional)¶
1 — Install
Install Microsoft Authenticator from your app store.
2 — Work account
Add your work account only — not a personal Microsoft account.
3 — Approvals
Use it when Security info or MFA prompts ask you to approve on your phone.
Keep Authenticator
Leave it installed after you add a passkey — it stays your backup for MFA.
New device or lost device¶
Passkeys stay on the device where you created them. Use the path below that matches your situation.
New device (laptop or phone)
When: You are moving to a new device you will use for work.
- Sign in with password + MFA
- Open Security info
- Add a new passkey (follow Add a passkey above)
- Remove passkeys listed for devices you no longer use
Lost or stolen device
When: A device that had your passkey is missing.
- On another device, sign in with password + MFA
- Open Security info and remove the passkey for the lost device
- Add a new passkey on a device you still have
- Contact Software immediately if the lost device was not encrypted
Troubleshooting¶
Passkey or Security key is not listed under Add method
Contact Software with your work email and a screenshot of Security info.
Setup fails after Windows Hello or Touch ID
Try Microsoft Edge on Windows, update OS and browser, then retry in an InPrivate or Incognito window.
Every sign-in still asks for a password
Use Sign-in options on the Microsoft login page and select your passkey. Contact Software if a passkey is never offered.
Hardware security key (YubiKey, etc.)
Choose Security key under Add method and follow Microsoft’s security key guide.