Setting up Authentication for Windows Hello

Users of university-issued Windows machines managed by Microsoft Intune must configure Windows Hello for computer sign-in. Windows Hello offers authentication through a phone call, text, or an authenticator app to verify identity. During the initial setup, users can choose their preferred authentication method. This article will guide users through the setup process for all available options.

Screenshot of Windows Hello instructing a user to set up authentication options. It gives the option for using the Microsoft Authenticator app, or to set up using a different method.
Prompt to set up authentication options at initial setup

Option 1: Authenticating with Microsoft Authenticator

  1. Download the Microsoft Authenticator app to your phone. This app is available on the Google Play Store and the App Store.

  2. On your computer, click Next to begin setup.

  3. Follow the instructions on your computer screen until the QR code is visible.

  4. Tap the button on your phone inside the Microsoft Authenticator app, then choose Work or school account. If asked, choose Scan QR Code.

  5. Scan the QR code on your screen.

  6. On your computer, click Next.

  7. Now, you must add either a backup phone number (cell phones and landlines are supported) or email address. The setup wizard will default to a phone number, but you can choose an email option by selecting I want to set up a different method. You should not use your UConn email for this.

  8. Follow the instructions to add your phone number or email address. Depending on the option that you pick, you will either receive an automated phone call, text, or email to verify your identity.

  9. Once the secondary authentication method is verified, your account is set up. You can now set your Windows Hello sign-in method.

Alternative: Authenticating with Duo Mobile

  1. At the initial authentication screen, select I want to set up a different method. Select Set up a different Authenticator app.

  2. Open Duo Mobile on your cell phone and select Add . Select Use QR code and scan the QR code that is showing on your computer screen.

  3. On your phone, give the authentication a name (the default is usually fine). Then continue to the next step.

  4. Create a backup password. This password is used if you ever get a new phone and want to transfer this authentication method to that phone. Then continue to the next step.

  5. Proceed to the next screen on your computer. You will see a prompt for the code being displayed on your phone. Enter the 6-digit code displayed in the Duo Mobile app. Then continue.

  6. Once the secondary authentication method is verified, your account is set up. You can now set your Windows Hello sign-in method.

Alternative: Authenticating with a phone call or text

  1. At the initial authentication screen, select I want to set up a different method. Select Phone. Both landlines and cell phones are supported.

  2. Follow the instructions to add your phone number or email address. Depending on the option that you pick, you will either receive an automated phone call or text verify your identity.

  3. Once the secondary authentication method is verified, your account is set up. You can now set your Windows Hello sign-in method.

Related articles