Body
Passkeys
A passkey is a secure way to sign in to your UFV account without relying on a password alone.
Instead of typing your password and then reaching for your phone to approve a notification, a passkey lets you prove that it's really you by using the device you're already on. Depending on your device, this might mean using your fingerprint, face, a device PIN, or approving a pop-up notification. .
Passkeys are designed to make signing in both easier and more secure. They provide strong protection against phishing and other attacks that try to steal your password or trick you into approving a fraudulent sign-in.
Why use a passkey?
-
Protection against phishing
Passkeys are designed to work only with the legitimate website or service where they were created. A fake website cannot use a passkey you create with the real website. This makes passkeys particularly useful against phishing attacks, where someone tries to convince you to sign in to a fake website.
-
No code to type
With a passkey, you generally don't need to wait for a text message, find a six-digit code, or approve a notification on your phone. You simply use the device you already have.
-
No password to remember
A passkey is not something you need to memorize. Your device or password manager securely stores it for you. You may still have an UFV password for some situations, such as signing into the computers in the labs, but you don't necessarily need to use it every time you sign in.
-
Works with the devices you already use
Depending on your device and setup, a passkey can be stored on your computer, phone, tablet, or in a supported password manager. UFV also supports physical security keys, which are useful if you prefer not to use a phone or want a separate device for signing in.
How does a passkey work?
There are two types of passkeys:
- Device-bound passkey: Your fingerprint, face, or device PIN is securely saved on your device, and can only be used on the device it was saved on (e.g. Windows Hello)
- Synced passkey: Your passkey is securely saved in a cloud‑backed credential manager - such as iCloud Keychain, or Google Password Manager - and automatically syncs across your devices.
When you create a passkey, it is securely associated with your UFV account and your device or passkey manager. When you sign in, your device verifies that you have the passkey. You unlock it using the method supported by your passkey, such as a fingerprint, facial recognition, or PIN.
Your fingerprint, face, or device PIN is never sent to UFV. Your device uses that information locally to confirm that you have the passkey.
What kind of passkey is right for me?
Refer to the matrix below for passkey recommendations based on your device type.
What if I get a new phone or computer?
This depends on where your passkey is stored. Some passkeys can be securely synchronized between your devices through a supported password manager or device ecosystem. Others are tied specifically to one device or physical security key.
If your passkey is only stored on one device and you replace or lose that device, you may need rest your MFA and register a new sign-in method. For this reason, it is a good idea to have more than one way to access your account.
Is a passkey the same thing as MFA?
Passkeys and multi-factor authentication (MFA) are related. MFA means using more than one piece of information to prove your identity. Traditionally, this might mean entering your password and then approving a notification on your phone.
A passkey combines this kind of strong authentication with something you have — your device or security key — and something used to unlock it, such as your PIN or biometric information. This allows a passkey to act as a second factor for authentication.