Synced Passkeys

UW-Oshkosh IT is currently testing synced passkeys in a private preview. If you’re not part of this preview you’ll NOT be able to complete these steps. However, we’re excited about synced passkeys and hope to have more to share in the future.

Passkeys are a faster and more secure way to login to your NetID without a password or second verification step. Instead, passkeys utilize a unique cryptographic key to authenticate you. Simply sign in with your face, fingerprint or PIN, it’s just that easy and secure.

Passkeys are:

Phishing-resistant: They can’t be tricked out of you by fake websites.
Easy to use: No more remembering passwords or resetting authenticator apps.
Cross-device compatible: You can use them on your phone, tablet, or computer.

Different Kinds of Passkeys

Device-bound: Stored in a device’s hardware security module, can’t be transferred to another device and can’t be synced. Users must set them up on each device.
Synced: Stored securely with a password/passkey manager such as Apple Passwords, Google Password Manager, 1Password, Bitwarden, Dashlane or LastPass.

Entra ID which powers your NetID currently support device-bound passkeys with Microsoft Authenticator, hardware keys (such as YubiKeys) and is actively investing in synced passkeys.

Register a Passkey (Private Preview)

When you register a passkey, you’ll need to choose where to store it which determines the devices you can use it on. If you use a mix of Apple, Android and Windows devices, you may need to register a separate passkey for each.

Ways to Store Passkeys

Built-in Options

These are natively built-in into your operating system and require no app.

Apple Passwords → Syncs passkeys across iOS, iPadOS and macOS
Google Password Manager → Syncs passkeys across Android devices and Google Chrome
- macOS users: If you’re prompted to save your passkey to Google Password Manager we reccomend choosing “Save another way” and using Apple Password (iCloud Keychain)
Windows → Store passkeys locally with Windows Hello

iCloud Passwords

Tap Settings, tap your name, then choose iCloud.
Under Saved to iCloud, tap Passwords. In iOS 17 or earlier, tap Passwords and Keychain.
Confirm that Sync this [Device] is turned on. If it is not, tap Sync this [Device] to turn on iCloud Passwords & Keychain. You might need to enter your passcode or Apple Account password.

AutoFill

Tap Settings, tap General, then choose AutoFill & Passwords.
Confirm AutoFill Passwords and Passkeys is turned on then confirm that AutoFill from Passwords is turned on.

Google Password Manager

Open Android's System Settings
Select Passwords, passkeys & accounts
Confirm that Google is selected under Preferred service. If it is not, tap the Change button under preferred service and select Google. Then confirm this change.

AutoFill

Tap Chrome, tap the three dots on the right side, then choose Autofill and Passwords
Tap Settings and choose Password manager.
Tap the gear icon on the top right side of the screen and toggle on Offer to save passwords

Instructions

Navigate to the Entra ID Security Info page from a browser
Tap or click Add sign-in method > Select a Method > Passkey > Next

A security dialog opens on your device and asks where to save the passkey.

Options displayed vary depending on your browser and device operating system. If the device where you started the registration process supports passkeys, you'll be asked to save the passkey to that device. Select Use another device or More options to display additional ways for you to save the passkey.

After you're redirected to Security info, you can change the default name for the new sign-in method.
Tap or click Done to finish registering your passkey.

Passkey Manager Overview

Passkey Manager	Windows	macOS	iOS/iPadOS	Android

Passkey Manager

Windows

macOS

iOS/iPadOS

Android

iCloud Passwords and Keychain

N/A

Natively built-in

macOS 13+

Natively built-in

iOS 16+

N/A

Google Password Manager

Built-in to Chrome

Built-in to Chrome or Google app

Natively built-in except Samsung

Android 9+

Other passkey managers (such as 1Password, Bitwarden)

Check for app or browser extension

Check for browser extension

Check for app

Android 14+

Frequently Asked Questions

What is the sign-in experience like?

Your passkey should be automatically suggested at the sign-in screen or after you’ve entered a username. If it’s not look for the option to “Sign in another way” or “Use your face, fingerprint, PIN or security key instead.”

Safari on macOS	Chrome, Edge and other browsers
Passkeys from iCloud Keychain will be automatically suggested when you select the username field on the sign-in screen or after you’ve entered a username.	Passkeys from Google Password Manager automatically suggested when you select the username field on the sign-in screen. If you’re using iCloud Keychain you’ll need to enter a username and then choose iCloud Keychain when prompted to use a saved passkey initially to grant Chrome access to iCloud Keychain.
iOS and iPadOS	Android

Can I sign-in with a passkey on a device where it isn’t synced?

Yes! Cross-device sign-in allows you to use a passkey stored on your mobile device (like an iPhone or Android) to sign in to a separate device, such as desktop or a laptop where your passkeys aren't synced.

How it works

Enter your username: You may be automatically prompted to use your face, fingerprint, PIN or security key, if not choose this option
Choose where to use a saved passkey from: Select “Use a phone or tablet” or “Use passkey from a device with a camera”
Scan the QR Code: Since the computer doesn't have your passkey, it will display a QR code. Open the camera app on your phone and scan the code.
Verify: Your phone will prompt you to authenticate using your face, fingerprint, or PIN.
Success: Once verified on your phone, the computer will automatically log you in.

Both the computer and your phone must have Bluetooth turned on.

Does the university see my fingerprint or face?

No. Your biometric data (face or fingerprint) never leaves your personal device. It is stored securely on your phone or computer’s security module. When you sign in, your device simply tells the system, "User verified," and releases the cryptographic key. UW-Oshkosh only receives the digital key, not your biometric data.

Why isn't my passkey popping up?

If the prompt doesn't appear automatically, you may need to click “Use your face, fingerprint, Pin or security key instead” or "Other ways to sign in." Also, ensure your browser's autofill settings are active.