FIDO2 USB Key

What you need

• USB FIDO2 security key (e.g., YubiKey)
• Computer running Windows, macOS, or Linux with a USB port
• Web browser that supports FIDO2 (Edge, Chrome, Firefox, Safari)
• Work or school Microsoft Entra ID account
• Multi-factor authentication (MFA) enabled (e.g., Microsoft Authenticator)

Open the security info management portal

1. Open your browser and go to https://aka.ms/mysecurityinfo
2. Sign in with your work or school account
3. Under Security info, click on Add method

Register your USB FIDO2 security key

1. From the list, select Security key and click Add
2. Select USB device (or NFC, depending on your key type)
3. Insert your USB FIDO2 security key into a USB port
4. Click Next and follow the browser instructions

Set up and verify your USB FIDO2 security key

1. If your key supports touch verification, you will be prompted to touch the sensor
2. If your key requires a PIN, create and confirm a new PIN
3. Once verified, enter a name for the security key (e.g., “My USB FIDO2”)

Complete the registration

1. After successful registration, your USB FIDO2 security key will appear in the sign-in methods list. Click Done

How to sign in using your USB FIDO2 security key

1. At the Microsoft 365 or Windows sign-in screen, select Sign-in options
2. Select Sign in with a security key
3. Insert your USB FIDO2 security key and follow the prompts to verify