How to Add Multi-Factor Authentication (MFA) and Passkeys to Your Google Account

Overview

Multi-factor authentication (MFA), also called two-step verification (2SV), is required for all HFCR employees with a school email account. MFA protects your account by requiring something more than just your password.

Google now also supports Passkeys, which are a stronger and more convenient alternative to passwords and verification codes.

• Standard 2FA: Uses a code sent via text or phone call.

• Passkeys: Use your fingerprint, face recognition, or device PIN to prove it’s really you. Passkeys cannot be phished or guessed like a password, making them more secure than traditional 2FA.

Steps to Enable 2-Step Verification

1. Sign in

   • Go to: https://myaccount.google.com/security.

   • Make sure you’re signed into your school Google account (@hfcristorey.org).

2. Go to 2-Step Verification

   • Scroll down to the “How you sign in to Google” section.

   • Click “2-Step Verification.”

3. Begin setup

   • Click the blue “Get Started” button.

4. Add a backup method

   • Enter your phone number.

   • Choose whether you’d like verification codes via text message or phone call.

   • Click Next.

   • Enter the code you receive and click Next again.

5. Finish setup

   • Click “Turn On.”

   • Your account now requires a second step when signing in on a new or unrecognized device.

Steps to Add a Passkey

1. Stay in your Google Account Security settings

   • Under “How you sign in to Google,” click “Passkeys.”

2. Create your Passkey

   • Click “Use Passkeys.”

   • Choose your device (computer, phone, or security key).

   • Follow the on-screen prompts to register your fingerprint, face recognition, or device PIN.

3. Verify setup

   • Once complete, you’ll be able to sign in using just your passkey—no password or code required.

Why Passkeys Are More Secure than Standard 2FA

• Resistant to phishing: Passkeys can’t be tricked by fake login pages, unlike text-message codes.

• No password reuse: Passkeys don’t rely on memorized passwords, so there’s no risk of using the same password across multiple accounts.

• Device-based authentication: Only your registered device(s) can generate the passkey.

• Faster login: Instead of typing codes, you simply use your fingerprint, face ID, or device unlock.

Support

If you have any issues setting up 2FA or Passkeys, please contact Matt Smith at it@hfcristorey.org.