Password Requirements:
- Passwords must be at least 8 characters long.
- Passwords must contain at least:
- One uppercase letter (A-Z)
- One lowercase letter (a-z)
- One special character from the following set:
!@#$%^&*()_+-=[]{}|;:,.<>?
- Passwords must not be identical or similar to previously used passwords.
Authenticator App
Sign in with a 6-digit code from an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password...) instead of typing your password. Your password still works. One phone or app at a time.
Step-by-step guide (PDF)
1. In your authenticator app, add an account and scan this code:
Can't scan it? Enter this key instead (time-based):
Passkeys
Sign in with your phone instead of typing your name and password: the computer shows a QR code, you scan it with your phone's camera and unlock your phone (Face ID, fingerprint or PIN). Your password still works. A passkey only works on the website where you added it.
Passkeys are saved on your phone, never on a computer, so nobody else at a shared computer can sign in as you. Add one here on your phone, or from a computer and choose your phone when asked (the computer needs Bluetooth turned on). On your phone's own browser it just asks for Face ID, fingerprint or PIN.
Step-by-step guide (PDF)
Click Save Passkey and choose your phone (if it offers to save here, pick "use a phone or tablet" instead), then unlock your phone and scan the QR code with its camera.
Using a password manager? If it pops up offering to save the passkey, close its window without saving. The QR code appears next.
Password Sign-In
You have an authenticator app and a passkey, so you can stop using a password here. Once it's off, nobody can sign in as you with your password, even if they know it: you sign in with a code from your authenticator app or with your passkey. Manager overrides and lock screens work the same way.
While it's off you can't remove your authenticator app or your last passkey. If you lose both, ask IT to email you a temporary password.
To turn it off, enter a code from your authenticator app, then use your passkey when asked.
To use a password again, enter a code from your authenticator app and choose a new password.
At least 8 characters, with an uppercase letter (A-Z), a lowercase letter (a-z) and one of !@#$%^&*()_+-=[]{}|;:,.<>? It can't be one you used recently.