To set up a Security Key, you'll need a Password Manager to generate one. You can have the Password manager on a Phone, Computer, or Tablet.
The process should be the same for whichever one you have. This guide is going to use NordPass as the example, as that is what I am currently using. For a list of some of the top password managers, you can use this guide: What are the top Password Managers?
Step 1: From the ctcLink home page, click on the Okta Portal link.

Step 2: You may have to log in and authenticate again; then you will click on Password Settings.

Step 3: Scroll down through your settings to get to your Security Methods and click on the Set Up button for the Security Key.

Step 4: ctcLink will have you verify yourself again, then you will see the screen to set up the Security Key or Biometric Authenticator. Click on Setup

Step 5: Click on the Set up button.

Step 6: Your Password Manager should pop up with an account for a Passkey. You will want to click on Create or whatever your Manager has for the affirmative.

ctcLink will take you back to the Security Methods, and if you now see the option to Remove the Security Key, you know that it was set up correctly.

To set up Biometric Authentication,
it must be configured on your device:
Step 1: Sign in to ctcLink MyAccount
- Open a web browser.
- Go to https://myaccount.ctclink.us
- Sign in using your:
- ctcLink ID
- ctcLink Password
- Verify your identity using your current MFA method if prompted.
Step 2: Open Password Settings
- After signing in, click on the Okta Portal link. You will arrive at the My Apps page.
- Select the Password Settings tile.
Step 3: Locate Security Methods
- On the Account page, scroll to the Security Methods section.
- Find Security Key or Biometric Authenticator.
- Click the Set Up arrow/button.
Step 4: Register Your Biometric Device
- When prompted, choose to register an authenticator device.
- Select the biometric option available on your device:
- Windows Hello (Windows)
- Touch ID (Mac)
- Face ID (Mac or Mobile)
- Fingerprint Reader (supported devices)
- Follow the on-screen prompts from your device.
Step 5: Create and Save a Passkey
- Choose where you want to save the passkey:
- This Device
- Microsoft Account
- Apple Keychain
- Google Password Manager (if available)
- Complete the biometric verification when prompted.
- Wait for confirmation that the passkey has been successfully registered.
Step 6: Sign Out and Test
- Sign out of ctcLink.
- Return to https://myaccount.ctclink.us
- Sign in again.
- When prompted for MFA, select your:
- Security Key
- Biometric Authenticator
- Use your fingerprint, face recognition, or other configured biometric method to complete authentication.