A small number of individuals have Yubikey security keys (small USB devices that can go on a key chain) in place of getting the Microsoft Authenticator app or getting text messages to log in. The process for setting up a Yubikeys is as follows:
- Open your preferred web browser and go to log into your campus email as normal.
- Go to https://aka.ms/mfasetup.
- Click on Add sign-in method.
- Choose Passkey (not "Passkey in Microsoft Authenticator")
- On the screen that says "Sign in faster with your face, fingerprint, or PIN" click Next.
- When prompted for the type of device, choose "Security Key".
- Insert the security key into the USB port when prompted.
- You will have to select a PIN for the security key. We recommend at four or six digits.
- You'll be prompted to touch the gold circle on the security key. Do so.
- The final step is to give the security key a name. Unless you have multiple such devices (which is uncommon) you can just call it "Security Key" or "New Paltz Security Key".
In the future, to use it when logging in, after entering your user name but before entering your password, you will see the following screen. Instead of entering your password, click on "Use your face, fingerprint, PIN, or security key instead".
You will then be prompted to insert your security key (if it isn't already in the computer), enter the pin, and touch the gold circle to complete the login.
Microsoft will remember the last method you used to log in - so you won't have to click "Use a security key" each time.