Passkeys: A Simpler, Safer Way to Protect Your Western Account

Most people are familiar with multi-factor authentication (MFA): after entering a password, you're asked to approve a sign-in or enter a code. MFA remains one of the most effective ways to protect accounts, but the next step in account security is already here: passkeys.

A passkey lets you sign in using a device you already trust, such as your phone, laptop or security key. Instead of typing a password, you verify your identity with a fingerprint, facial recognition or device PIN. The result is both more convenient and more secure.

Why does this matter? Cybercriminals have become increasingly effective at stealing passwords and even tricking people into approving MFA prompts. Passkeys were designed to prevent those attacks. Because a passkey is tied to your device and cannot be reused on fake websites, it is much harder for attackers to steal.

Microsoft is encouraging organizations around the world to adopt passkeys, and Western is supporting that effort as part of our ongoing work to strengthen account security while making authentication easier for students, faculty and staff.

Moving to passkeys provides several benefits:

• Faster sign-ins with fewer prompts
• Better protection against phishing attacks
• Reduced risk of compromised passwords
• A simpler experience across services

If you've been seeing prompts from Microsoft to set up a passkey, that's not marketing. It's part of a broader industry shift away from passwords and toward stronger, easier authentication.

Information Technology Services (ITS) encourages faculty and staff to take a few minutes to set up a passkey when prompted. It's one of the simplest actions you can take to improve the security of your Western account.

Additional information and setup instructions are available at https://atus.wwu.edu/kb/passkeys-universal-account-login.