Passkeys for students
Microsoft is retiring SMS and voice as authentication methods, a change being driven industry-wide, not something UHI has chosen unilaterally. From 1 September 2026, passkeys become the default sign-in method across Microsoft Entra, and Microsoft-provided SMS/voice authentication is being switched off entirely from 28 January 2027.
Why the change? Passwords, SMS codes, and voice calls are all vulnerable to interception, phishing, and social engineering - and as AI-driven attacks get more sophisticated - these older methods simply don't hold up.
Passkeys are phishing-resistant by design: there's no code to intercept and nothing to trick a user into handing over.
So students can now setup a Passkey as an option to authenticate.
Before you start
Please ensure:
- You have already set up an authentication method on your UHI account.
- You are using the most up to date operating system on your device.
- You can sign in successfully using your UHI account.
- We recommend Microsoft Authenticator as a primary authentication method and suggest setting up more than one authentication method where possible.
- If you experience any issues with this, please contact the UHI IT ServiceDesk.