Register passkey on a smartphone

Passkeys are a phishing-resistant alternative to conventional passwords. You can authenticate yourself by using your smartphone and setting up a PIN or biometrics.
The next steps demonstrate how you can set up a passkey as an authentication token for TH AB.
This can only be used to authenticate a second device with your smartphone if both devices have Bluetooth.

1) Visit mfa.th-ab.de

After the usual Shibboleth registration with login and password, you can log in to eduMFA with your university ID:


2) Erstellen sie einen Passkey

Select “Enroll token” in the menu (1) and the token type “WebAuthn” in the drop-down menu (2).
In the Description field, you can enter brief information for this authentication token in order to be able to better understand yourself on which device you saved this token in the future.
By clicking on the button (3) “Enroll token” you will be forwarded to the next step.


3. follow the instructions on your smartphone:




If you do not yet use passkeys on your device and do not save any passwords, you must first confirm your lock screen PIN.



4. Using passkeys

4.2 Using a passkey for another device

You can also use the passkey stored on the smartphone for authentication on another device; both devices must support Bluetooth for this.
Under Windows 10, this only works with Chrome and Chromium-based web browsers (Edge, Opera, Brave, Vivaldi, ...) but not Firefox; from Windows 11 onwards, the functionality is available with any web browser.

4.2.1 Chrome and Chromium-based browsers (Edge, Opera, Opera GX, Brave, Vivaldi, ....) on Windows 10

Select the option “Other smartphone, other tablet or other ...”

4.2.2 Windows 11



4.1 Use passkey on your smartphone

To use the saved passkey, click on the “Passkeys” button on the login screen and follow all further instructions.