The Microsoft Authenticator app is the standard multi-factor authentication method at Villanova. However, in the event that an alternative is necessary, Technology Services will enable the use of a hardware security passkey. Please see below for frequently asked questions about this alternative.
FAQs
What is a hardware security key?
A hardware security key is a physical device that stores a passkey and acts as a method of passwordless authentication. Instead of entering a password, you authenticate by entering a PIN and then touching the physical hardware security key. Learn more about passkeys.
What qualifies me for an exception to use a hardware security passkey?
Although many members of the Villanova community choose to use the Microsoft Authenticator app, we recognize that it is not the right solution for everyone. Exceptions may be granted in cases such as:
Device Compatibility
- You own a basic flip phone
- Your smartphone device is end of life and does not allow for the latest version of Authenticator
- Your smartphone OS does not offer Authenticator to download (e.g. GrapheneOS)
Policies and Accommodations
- Medical or accessibility limitation prevents smartphone use
- University policy or approved accommodation restricts smartphone use
Personal Reasons
- You do not own a personal mobile device
- You feel strongly against using a personal mobile device for Villanova MFA
- You are concerned about the distractions of number-matching prompts for MFA
Where do I get a hardware security key?
Technology Services has a limited number of hardware security keys available at TechZone locations at no cost to faculty, staff, and students. We will provide one hardware security key per person. Additional hardware keys must be purchased at your own expense.
Once our stock of hardware security keys is gone, users will need to purchase their own. The Villanova Bookstore carries the GoTrust ID Idem Key. You can also purchase a hardware security key through retailers such as Amazon, Best Buy, Walmart, etc.
How do I know which hardware security keys are compatible with Villanova's MFA?
Microsoft Authenticator currently supports several designs and providers of hardware security keys using the Fast Identity Online (FIDO2) passwordless authenticator protocol, such as the YubiKey 5C NFC or the GoTrust ID Idem Key.
How do I enroll my hardware security key for Villanova MFA?
Please contact Technology Services to request an exception to store your passkey via hardware security key. If you do not have another form of authenticate set up, they will need to provide you with a temporary access pass (TAP) to log in to your account. Then, follow the instructions to enroll with a passkey via hardware security key.
Will you ship me a free hardware security key?
No, we do not ship Technology Services-provided hardware security keys. If you are not local to campus, you can easily purchase one online through retailers such as Amazon, Best Buy, Walmart, etc.
What happens if I lose my hardware security key and need to log in?
If you lose your hardware security key, please contact the Service Desk. They will provide you with a temporary access pass to enable you to log in to your accounts until you can obtain a replacement. Once you have your new hardware security key, follow the steps to enroll your new passkey and be sure to remove your lost key as an MFA method.
Temporary access passes are a short-term solution. Please buy your new hardware security key in a timely manner, and consider setting up the Microsoft Authenticator app as a back up MFA method should you lose your hardware security key again in the future.
Will you replace my free hardware security key if I lose it?
If you lose the hardware security key provided by Technology Services, you will be responsible for purchasing a replacement. We recommend that you attach it to a keyring or wrist loop to more easily keep track of it when not in your device.