Passkeys, fingerprint or face, and a PIN
Beside the authenticator app you can sign in with a passkey or your device’s Windows Hello, Touch ID, Face ID or fingerprint, and use a 6–8 digit PIN as the second step on a device you trust. Set them up under Personalize › Sign-in methods.
Setting one up
- Open Personalize and go to Sign-in methods.
- Press Use Windows Hello on this device (or Face ID or Touch ID, Touch ID, fingerprint or face unlock — whatever your device has), or Add a passkey to keep one on your phone, in a password manager or on a security key.
- Enter Your password and press Continue, then follow your device’s prompt.
- The passkey is listed with when it was added and last used. Remove stops it signing you in.
Signing in with it
- On the sign-in page press Sign in with Windows Hello or a passkey (or Sign in with a passkey) — no email needed. Where your browser offers it, the email box suggests your passkey too.
- If your company asks for the password first, enter it, then use the passkey as the second step.
- On the second step, choose the method you have: Use your PIN, Use a passkey, Use the authenticator app or Use a recovery code.
A PIN on a trusted device
- Sign in fully once — password plus the app or a passkey — and tick Trust this device.
- Under Sign-in methods press Set a PIN: 6 to 8 digits, not one digit repeated and not a run like 123456, typed twice, with your password.
- From then on, on that device, the second step can be This device is trusted. Enter your PIN.
- A PIN never replaces your password, and works only on a trusted device. A device stays trusted for your company’s number of days (30 unless changed); Stop trusting ends it.
- Five wrong PINs switch the PIN off until you next sign in with your app or a passkey.
- When an administrator sets you a new password, your PIN and trusted devices are cleared; your passkeys stay.
No Sign in with a passkey button means passkeys are not available at this address yet, or your browser cannot use them (try a current Chrome, Edge, Safari or Firefox). The authenticator app and recovery codes keep working. See Two-step verification.
Customer and supplier portal users can add passkeys too: on the customer portal’s home, and on the supplier portal’s Sign-in tab, when the company allows them.