MFA: Enroll a Passkey With My Android Phone or Tablet (synced to Google Password Manager)

Article Intended For

Penn State University employees, students, and other affiliates who wish to use a passkey for Microsoft MFA that is synced to the Google Password Manager associated with the Google Account for their Android devices.

Introduction

This article provides step-by-step instructions for creating a synced MFA passkey in Google Password Manager for an Android smartphone or tablet.

Device Requirements:

• Android 9.0 or later.
• Google Play services must be enabled.
• The device must have a screen lock (face, fingerprint, or PIN) set up.
• Google Password Manager must be enabled as a passkey provider. It is enabled by default on most Android devices.

Things to know:

• Creating a synced passkey will save it to your Google Account's Google Password Manager on your Android device.
• Because the passkey is securely synchronized with your Google Account, it can be used across multiple Android devices where you are signed in with the same Google Account.
• If you lose, damage, or replace your Android device, the passkey will remain associated with your Google Account, meaning you do not have to re-add it when you sign in on a replacement device.
• Samsung Galaxy Users: Your device may use Samsung Pass as its preferred passkey provider even if Google Password Manager is enabled. If you want to save your passkey to Google Password Manager, select Google as your preferred password and passkey provider in your device settings. Instructions can be found at the following link on Samsung's website: https://www.samsung.com/us/support/answer/ANS10003299/

Article Body

NOTE: Google Password Manager must be enabled as a password and passkey provider on your device. Open the Settings app and search for Passwords. Select Passwords, passkeys & Accounts, then verify that Google Password Manager is enabled.

1. sign in to https://mysignins.microsoft.com/security-info using your Penn State Account credentials
   
   
2. select +Add sign-in method
   
   
   
   
3. select Passkey
   
   
   
   
4. select Next
   
   
   
   
5. If you already have a passkey enrolled, you will see the following screen and will need to select Change.
   
   If you don't encounter this screen, continue to step 6.
   
   
   
   
6. select iPhone, iPad, or Android device
   
   
   
   A QR code will appear on your screen.
   
   NOTE: Bluetooth must be enabled on your computer to use a passkey stored on a smartphone. If you see a screen informing you that Bluetooth is off, select Turn on Bluetooth then the QR code should appear.
   
   
7. on your Android device, open the Camera app, center the QR code, and select Go to when this option appears
   
   
   
   
8. on the Create a passkey screen, which displays the Google Password Manager logo, select Continue
   
   NOTE: Depending on your device, another supported passkey provider, such as Samsung Pass, may appear instead of Google Password Manager. If you want to save your passkey to Google Password Manager, select More options and choose Google Password Manager, if available.
   
   
   
   
9. complete the requested unlock response (Face Unlock, Fingerprint, PIN, or Pattern) when prompted by your device. This is the same method you use to unlock the device.
   
   
10. in your browser window, you should be presented with an option to type in a name for your passkey. This is optional but we recommend entering a name that will help you distinguish it from other passkeys. For example: John's Google Pixel 11
    
    
    
    
11. select Next
    
    
12. on the confirmation screen that your passkey was created successfully, select Done
    
    
    

You can now follow the instructions in the following KB article to log into any Penn State website using your synced passkey: MFA: Sign In using a Passkey on a Smartphone or Tablet