Configuring your MFA methods

Click Here

Issues logging in

Click Here

Backing up and Restoring your MFA

Click Here

Frequently Asked Questions

Click Here

Password & Self-Service Password Reset Help

Click Here

Conestoga strives to provide Information Technology services to all community members with the highest availability and protections possible. As such Conestoga requires all community members to use Multi-Factor Authentication where able to provide a robust and secure user experience.
MFA can come in many forms, be it a text message, an application notification or a security key, there are many diverse and accessible options available to community members.

What is happening?

On February 1, 2027, Microsoft is retiring text/SMS authentication. If you currently receive a code by phone number, that will stop working after this date. You'll need to switch to the Microsoft Authenticator app, a USB security key, or a passkey to sign in.

What is a passkey?

A passkey lets you sign in without typing a password. You prove it's you the same way you already unlock your phone fingerprint, face, or PIN. Behind the scenes, your device and the website use a secret digital handshake that never leaves your device and can't be stolen, guessed, or phished.

This means that even a perfect fake copy of your bank's or school's login page won't work, because your passkey is built to only work on the real site.

This is why Microsoft and other providers are retiring text codes in favor of passkeys, which close these loopholes.

The Short Version

  • Password: a secret word you type in and remember.
  • MFA (Multi-Factor Authentication): a second check after your password, like a text code or app notification to prove it's really you.
  • Passkey: replaces both the password and the second check with one step: unlocking your phone or computer with your fingerprint, face, or PIN.

Think of a password as a key you carry in your head, one you can lose, forget. A passkey is built into your phone: nobody else can use it, even if they see it, because it only works when you unlock your device.

Passkey FAQ

Do I still need a password?

Yes, as a backup, but you'll rarely need to type it once your passkey is set up.                  

                 
What if I damage/lose my phone?

Contact IT, we'll help you sign in another way and/or reset your methods.                  

                 
Can someone steal my passkey if they steal my phone?

Not easily, it only works if they can also unlock your phone. Keep your screen lock enabled.                  

                 
Do I need a new phone?

Most modern phones work: Android 14+ or iOS 17+, with a screen lock already set up.                  

                 
Is it actually more secure, or just convenient?

Both, the convenience is a side effect of a stronger design: the credential is cryptographically tied to the real site, so it can't be tricked out of you.                  

                 
What's the difference between a browser passkey and a phone passkey?

Many browsers have a built-in passkey manager, and it's often the easiest option because you only need your PIN. However, a browser passkey is tied to that one browser on that one device. A passkey on your phone can also be used to approve sign-ins on other devices, so it works wherever you need to log in.                  

                 

Configuring your MFA methods

The first step is to sign in to your Conestoga College account at https://mysignins.microsoft.com/security-info on a desktop or laptop. It is not recommended to set up MFA on a phone or mobile device, as you will be unable to scan the required QR code.

We reccomend to have at least 2 methods of authentication, though using more is encouraged if possible. You cannot set Email as a primary method and it is only used for SSPR and Account Recovery.

Passkeys

Follow these steps to set up your passkey

1) sign into https://mysignins.microsoft.com/security-info (or any Conestoga service)

Screenshot of email log inScreenshot of password screenScreenshot of MFA prompt
2) On the "lets keep your account secure" pop up click "next"

Screenshot of "lets keep your account secure" 
3) On the following screen click "next"

Screenshot of passkey setup

4) on the next pop up select "iPhone, iPad, or Android device"

Screenshot of passkey setup

5) scan the QR code with your phones camera then tap "create a passkey"

Screenshot of passkey QR codeScreenshot of phone camera scanning QR code

6) tap "create" on your phone then the computer screen will update to say "connected"

Screenshot of passkey setup 

Screenshot of phone connect to computer

7) name your key then press "next", it's a good idea to name it related to Conestoga so you won't get confused with other passkeys

Screenshot of naming passkey 

8) click "next" again and you're done!

Screenshot of passkey created

Authenticator App

                 

(a): You will be brought to a page asking you to add a method. In this step, we will look at the Authenticator                  


screenshot authenticator app step a

(b): Click on "Add method" outlined in red in the previous screenshot. The default option is "Authenticator app", click "Add".
                 


screenshot authenticator app step b

(c): Follow the instructions in the pop-up to download the Authenticator app. You can also click on the "Download now" link to get step-by-step instructions.
                 


screenshot authenticator app step c

(d): Continue following the steps, in the app, choose to allow notifications, then click the + button in the top right corner of the app, and select "Work or School" account.
                 


screenshot authenticator app step d
screenshot authenticator app step d2
screenshot authenticator app step d3

(e): You will be shown a QR code on your display, you have to scan this QR code with your phone's camera within the Authenticator app. If you are having issues scanning the QR code, you can select "Can't Scan Image" which will provide you information to enter into the Authenticator                  

Note: The QR code reader is built into the Authenticator app, do not download a third-party QR code app.
                 


screenshot authenticator app step e
Alternative - Manual Authenticator Setup

If you are having trouble scanning the QR code, select "Or enter code manually" on your phone, and on the pop-up on the computer screen, select "Can't Scan Image", where you will be shown a URL and Code to enter on your phone.
                 

(a): Phone Screen
                 

(b): Computer Screen
MFA-computer.png
                 

(f): You will see your account listed in the                  


screenshot authenticator app step f

(g): Click “Next” on your desktop to verify the setup. Then you will be prompted to approve the notification in the app.
                 


screenshot authenticator app step g
screenshot authenticator app step g2

Note: Due to changes on Microsoft's end, you will now be prompted to enter a 2-digit number shown on the screen where you are logging in when approving the sign-in request.
                 

(h): The pop-up on the desktop will show that the notification is approved, click “Next”.
                 


screenshot authenticator app step h

(i): You will see the Authenticator app added as a method.
                 


screenshot authenticator app step i

Please note that deleting the Authenticator app from your device will break the setup and will prevent you from logging in with it, even if it is re-installed.
                 

screenshot phone step d
Using a Security Key

Looking for a Security Key?

Here are the security keys that we recommend:
                 

  1. https://pages.yubico.com/solutions-industries-education
  2. https://www.amazon.ca/HyperFIDO-Pro-Security-Value-Pack/dp/B08KVJ98M4/

Setting up your Security Key

  1. Go to https://mysignins.microsoft.com/security-info and login with your College Email and Password
    Sign In Method
  2. Select “Add method” and select “Security key”
    Add sign-in method
  3. You may be prompted to sign in with two-factor authentication, this usually just results in the page reloading.
    Security key
  4. Select the type of security key you have, in most cases this will be USB .
    Security key type
  5. There is some information provided about what to do to set up the security key, namely, having it ready to plug in and then touching the button on the key.
    Security key ready
  6. On the page that opens, a pop-up will inform you that your security key will be set up to login to your Microsoft account, click “Ok”
    Security key setup
  7. You will be provided some more information about setting up the security key, the information collected by Microsoft, and the information stored on your security key. Click “OK” to continue
    Continue security key setup
  8. You will be prompted to create a security key PIN or enter an existing PIN if there is already one on your device. Make sure they PIN is something you will remember. If you lose this PIN, the security key becomes unusable.
    Security key PIN
  9. After entering the PIN you will be prompted to touch the contact on your security key, this is usually a gold spot on the key, see your key manufacturer’s instructions for more information.
    Touch security key device
  10. Once the setup is complete, you will be prompted to give your security key a name, this can be anything you want.
    Name the security key
  11. You will receive a message informing you that the key was successfully set up, and you can now log into your Microsoft account with your security key rather than your password or other 2FA method.
    Security key setup completed

                 
                 

Using the Security Key to log in

  1. When logging into any Microsoft page to access your Conestoga College account, enter your full email address as normal, then on the password prompt page, select the option "Sign in with Security Key". Alternatively, if you have previously selected to sign in with a security key, you will be sent directly to the page asking you to touch the contact on your security key. You can also select another option if needed, such as a text message or app notification.
  2. Enter the security key pin
    Security key test
  3. Touch the contact on your key
    Security key test
  4. You will be prompted if you want to stay signed in, just as if you had signed in with a password and second factor .
    Stay signed in
                 
Recovery Email
                 
Please note that email only works for Self-Service Password Reset and account recovery, it does not work for MFA. If the two methods set up on your account include email and your primary MFA method fails, you will be unable to log in to your account. It is recommended to use two other MFA methods, and only add email as a third method.
                 

(a): Add another method, "Email", then click "Add".
                 

screenshot email step a

(b): Enter your personal email address, then click “Next”.
                 

screenshot email step b

(c): Enter the code that was sent to your email, it may take a few minutes to show up, then click "Next".
                 

screenshot email step c

(d): You will see that your email address was added to the list of authentication methods.
                 

screenshot email step d

Issues logging in

If you are having issues logging in, for example, if you are unable to access or use the MFA method you are prompted for, please follow these steps:

  1. On the page where you are prompted for your MFA method, select the button that says "I can't use my Microsoft Authenticator app right now" (or similar).
  2. You will be shown a list of MFA methods that you have set up. Choose an alternate method that you have access to in order to complete logging in.

If you do not have an alternate method set up, or are unable to access or use any of your alternate methods, please contact the IT Service Desk.

Backup and Restore

If you are getting a new phone or just want a backup in case your phone is damaged follow these steps to backup and restore your MFA 

Apple iOS - Backup

  1. Log into your security portal Make sure you have a non-authenticator method added to your account like an up-to-date phone number and/or USB Security Key
  2. If you use the Microsoft Authenticator it will automatically backup your MFA to your iCloud account

Apple iOS - Restore

  1. Once you redownload the Microsoft Authenticator it will sync your MFA but by default you won't be able to authenticate with Conestoga just yet
  2. Open Microsoft Authenticator and tap on your Conestoga account, it will prompt you to log in and ask for a code from the Microsoft Authenticator , instead tap on "I can't use my Microsoft Authenticator app right now" 
  3. Select your secondary MFA method (phone number and/or USB Security Key) and continue authenticating
  4. Once you completed authenticating you will be able to use the Microsoft Authenticator again

Android - Backup

  1. Log into your security portal Make sure you have a non-authenticator method added to your account like an up-to-date phone number and/or USB Security Key
  2. From the Microsoft Authenticator home screen, tap on the 3 dots in the top right -> settings -> scroll down to "cloud backup" and enable the toggle switch
  3. You will be asked to log into a Microsoft account, you should be using a personal account and NOT your Conestoga account
    1. If you have an existing Microsoft account (From Windows, Xbox, or an @outlook, @hotmail, @live, etc email) then simply log in
    2. If you do not have a Microsoft account then you can tap on "create one" and follow the on screen steps 
  4. Once you are logged in you will get a confirmation prompt that the backup has been created

Android - Restore

  1. Once you redownload the Microsoft Authenticator it will sync your MFA but by default you won't be able to authenticate with Conestoga just yet
  2. Open Microsoft Authenticator and tap on your Conestoga account, it will prompt you to log in and ask for a code from the Microsoft Authenticator , instead tap on "I can't use my Microsoft Authenticator app right now" 
  3. Select your secondary MFA method (phone number and/or USB Security Key) and continue authenticating
  4. Once you completed authenticating you will be able to use the Microsoft Authenticator again

Frequently Asked Questions

What is multi-factor authentication (MFA)?
  • Multi-factor authentication (MFA) is a method of strengthening security on an account by requiring a secondary method of authentication outside of a primary username and password. Methods of MFA are also referred to as authentication factors.
  • MFA is also sometimes referred to as Two Factor Authentication (2FA), this is similar to MFA but generally consists of fewer authentication factors.
                 
Do I have to use MFA?
  • Yes. Absolutely. Conestoga requires mandatory MFA so that we can better secure our systems and data.
                 
What if I do not use MFA?
  • If you do not setup MFA, you will lose access to any Information Technology services provides by Conestoga including but not limited to Email, and eConestoga.
                 
What services support MFA Protection?

MFA supported Applications include but are not limited to:                  

  • Office 365 services – Email, SharePoint, Teams
  • Conestoga VPN
  • eConestoga
                 
What methods of MFA can I use?
  • Passkey
  • Microsoft Authenticator Application
  • FIDO2 Security Keys
                 
What devices are supported for MFA?
  • Passkeys
    • Phones running Android 8.0 and newer, or iOS 15.0 and newer
  • Microsoft Authenticator
    • Phones running Android 14.0 and newer, or iOS 17.0 and newer
  • Fido2 security keys (I.e. Yubikey, Feitian keys)
                 
Isn't my password enough?
  • MFA helps to ensure that your account remains secure and, in your control, even if your password is compromised
                 
Is there any cost to MFA?
  • The Microsoft Authenticator app can be used over cellular data which your carrier may charge you for or it can be used over Wi-Fi if available.
  • There are no charges with the use of a Security Key other then the purchase cost for one
                 
How often will I have to complete an MFA login?
  • Under normal conditions you would only have to complete an MFA enabled login occasionally, but the frequency of them occurring can be increased by using multiple different devices, changes in login location, or if there are unusual or suspicious activities on your account.
                 
Will MFA slow down my devices or software?
  • There will be no performance impact from MFA on your device or software.
                 
How does an MFA login work?

What should I do if I receive an MFA request and I did not initiate it?
  • Do not approve any MFA request that you did not start yourself. Also do not pass any MFA codes for your account to another person.
  • No other person should have access to your MFA devices or account.
                 
Can I use Microsoft Authenticator on multiple devices?

Yes, you can set up and use the Microsoft Authenticator app on multiple devices simultaneously. If you don't want to use an app, you can also authenticate using a browser passkey or a security key.
Only one method will be selected as the default authentication method, if that method is unavailable then it is possible to select a backup method to be used to authenticate.                  

                 
I've switched devices and/or need to reactivate Microsoft Authenticator
  • You can always add new devices, passkeys, and security keys by going to https://mysignins.microsoft.com/security-info and selecting Add Method. We highly recommend that you have multiple methods on your account in case one of those methods is unavailable.
  • If you have lost all MFA methods and devices you can always contact IT to help you register a new method or device and sign-in to your account to set up methods again.
                 
What if I can't or don't want to use the Microsoft Authenticator app?
  • The College's system is authenticated by Microsoft, and it is a Microsoft based server that is validating who you are and what you can access. Because of this, the College highly recommends using the Microsoft Authenticator app or passkeys. If you do not want to use the app, you can add a browser passkey, or you can use a security key. Any of these methods can be added by navigating to https://mysignins.microsoft.com/security-info.
                 
What if I don't have a cellphone, or don't want to use my personal phone?
  • You can use a Security Key if you don't want to use your cellphone to authenticate. Security keys come in many different types but the most common is a USB key that you can connect to your computer to authenticate along with a pin.
                 
What is a security key?
  • A Security Key (or security token) is a device that facilitates access, or stronger authentication, into other devices, online systems, and applications.
  • These devices are generally USB key size that plug into your laptop or desktop but can also be used with phones through Near Field Communication (NFC). They generally have a button or contact sensor on them to prevent misuse when a user is not present.
                 
Does Conestoga provide me with a security key?
  • No, Conestoga will not provide security keys.
  • Keys may be available for purchase from the on-campus bookstore or other local vendors near campus as well as online suppliers
                 
Where can I buy a security key? How much do they cost?

                 
How do I use a security key?
  • To log in with your Security Key when accessing your Conestoga College account, enter your full email address as normal, then on the password prompt page, select the option "Sign in with Security Key". Alternatively, if you have previously selected to sign in with a security key, you will be sent directly to the page asking you to touch the contact on your security key. You can also select another option if needed, such as a text message or app notification.
  • Enter the security key pin
  • Touch the contact on your key
  • You will be prompted if you want to stay signed in, just as if you had signed in with a password and second factor
                 
What happens if I lose my default MFA method?
  • If you lose the phone method you setup, you can use a backup method that does not involve either the phone. Once you are in your account again you should remove the lost phone as an authentication method until it can be found again. If you do not have access to a backup method, you should contact IT.
  • If you lose your Security Key, you can use other backup methods (the Authenticator app or printed one-time recovery codes) you setup when setting up multifactor authentication, to get into your account. You can also setup more than one Security Key on your account and keep it in a safe place.
                 
Where can I learn more about MFA and how to secure my account?
                 
How will MFA impact generic accounts?
  • For things like shared mailboxes, MFA will not have any impact. If you have questions about any specific accounts, please contact IT.
                 
As a service owner, will Conestoga provide MFA for my service/application?
  • We want to protect all Conestoga applications and services with MFA, for more details on specific services or applications, please contact IT.
                 
What is the Privacy documentation for this MFA service?