Okta — Frequently Asked Questions (FAQ)

Answers to common questions about Okta multi-factor authentication at UWL, including how to set up Okta Verify, manage security methods, get a YubiKey, handle a new phone, and what to do if you lose access to all your security methods.

What is Okta?

Okta is a platform UWL uses for multi-factor authentication (MFA). It adds a second layer of security when you log in to UWL systems like WINGS, Canvas, and email.

Why should I have more than one security method?

ITS recommends at least two security methods on your account. If your only device is unavailable and you need access outside of Help Desk hours, you will be locked out. One-time emailed or texted passcodes are not supported in Okta — a registered device is required.

What can be used as a security method?

Okta Verify app (iOS, Android, Windows, macOS)
YubiKey (USB-C with NFC, USB-A with NFC, or Lightning) — works with Windows, macOS, iOS, Chrome OS, Linux, and most web browsers
Touch ID (macOS)

How many security methods can I have?

You may add as many security methods as you like. ITS recommends at least two. Adding your phone number is not a security method — SMS passcodes are not supported in Okta.

What is Okta Verify (FastPass)?

Okta Verify (FastPass) is a feature within the Okta Verify app. Once set up, it automatically verifies your identity when you sign in to an Okta-protected app by selecting "Use Okta FastPass" — no push notification or YubiKey needed.

Okta sign-in screen showing the Use Okta FastPass option for automatic verification on a computer where Okta Verify is installed

How do I set up my Okta account for the first time?

See Okta — Initial Setup (Start Here) (opens in new tab).

Where do I get the Okta Verify app?

How do I disable biometrics on Android?

See the Disable Biometrics section of Okta — Set Up Okta Verify on Android (opens in new tab).

How do I add or remove a security method?

See Okta — Add or Remove Security Methods (opens in new tab).

I am getting a new phone. What should I do?

Remove your Okta account from your old phone before switching devices. See Okta — Authenticator Removal Before Getting a New Phone (opens in new tab).

I got a new phone and Okta is not working. What do I do?

I still have access to my old phone

Remove your UWL account from the old phone using the Okta Verify app or through your browser. See Okta — Authenticator Removal Before Getting a New Phone (opens in new tab), then set up Okta on your new phone.

I have Okta set up on another device

Use your other device to sign in and add your new phone as a security method. See Okta — Add or Remove Security Methods (opens in new tab).

I do not have access to my old phone or any other Okta device

Contact the Eagle Help Desk in Wing 103. We can reset your authentication via a quick video call.

I don't have access to any of my security methods. Can I get a one-time passcode?

One-time emailed or texted passcodes are not supported in Okta. Contact the Eagle Help Desk for assistance. To avoid this situation in the future, add at least two security methods to your account.

How do I get a YubiKey?

Faculty and Staff

Order through Technology Purchase — CDWG (UWL Departments) (opens in new tab).

Students

ITS recommends a USB-C with NFC YubiKey for most students. Options include:

Recommended — USB-C with NFC (can authenticate by holding near most smartphones): Yubico YubiKey C NFC (opens in new tab)
USB-A with NFC: Yubico YubiKey NFC USB-A (opens in new tab)
Lightning and USB-C: Yubico YubiKey 5Ci (opens in new tab)

What if I need a YubiKey with USB-A, USB-C, and Lightning?

ITS recommends the Okta Verify app when possible. USB-C is the most widely used connection type — USB-A and Lightning are being phased out by manufacturers. The USB-C and USB-A YubiKeys recommended by ITS both include NFC, so they can authenticate wirelessly with most smartphones. If you need multiple connection types, you may need more than one YubiKey.

How do I set up a YubiKey?

Important: You must set up Okta Verify on a device before adding a YubiKey. No smartphone? Set up Okta Verify on your computer first — see Okta — Set Up Okta Verify on Windows and macOS (opens in new tab).

Once Okta Verify is set up, add your YubiKey via Okta — Add or Remove Security Methods (opens in new tab).

YubiKeys are the only security method right for me. How do I set them up?

You must set up Okta Verify on a device first — it can be removed after your YubiKeys are added. If you don't have a device where Okta Verify can be set up, visit the Eagle Help Desk for assistance.

How do I change or reset the PIN on my YubiKey?

See Okta — YubiKey PIN (Change or Reset) (opens in new tab).

I don't have a smartphone. What are my options?

Consider purchasing a YubiKey. Set up Okta Verify on your computer first — see Okta — Set Up Okta Verify on Windows and macOS (opens in new tab) — then add your YubiKey via Okta — Add or Remove Security Methods (opens in new tab). Once the YubiKey is added, the Okta Verify app can be removed from your account.

Need help? Contact the Eagle Help Desk.