Set up a FIDO2 security key / passkey

FIDO2 / WebAuthn is the most secure authentication method available in Schoolysoft. It uses a physical key (YubiKey, etc.) or your device’s biometrics (Face ID, Windows Hello, Touch ID) instead of a 6-digit code.

Compatible hardware

  • FIDO2 USB keys: YubiKey 5, Google Titan Key, Feitian, etc.
  • Built-in biometrics: Face ID (iPhone/Mac), Windows Hello (PC), Touch ID (Mac/MacBook).
  • Passkeys: stored in your password manager (1Password, iCloud Keychain, etc.).

Registering a FIDO2 key

FIDO2 is enrolled during multi-factor authentication setup, when your account is activated or from the MFA setup screen — there is no separate screen under “My account” to add a key afterwards.

  1. On the MFA setup screen, choose security key / passkey authentication.
  2. Optionally give the key a name (e.g. “Office YubiKey”).
  3. Follow the on-screen instructions:
    • Plug in your USB key and press its button, OR
    • Confirm with Face ID / Touch ID / Windows Hello.
  4. The key is registered and becomes your strong authentication method for this account.

FIDO2 and TOTP are mutually exclusive methods: an account uses one or the other, not both. There is no fallback to a backup TOTP code if your key is unavailable.

Using FIDO2 at sign-in

  1. Enter your email address and password.
  2. On the MFA verification page that follows, click Authenticate with my key.
  3. Plug in or activate your security key.

Removing a key

A FIDO2 key cannot be removed by the user directly. Contact Schoolysoft support — they will verify your identity before removing the method and letting you set up a new one.

Note for Super Admins

Schoolysoft Super Admin accounts require FIDO2 exclusively. TOTP is not accepted for this privilege level.