Field guide · Security key · &DEV/SEC
■ How-to · Microsoft account Security Practice
Hardware security token  ·  e.g. YubiKey

Add your security key. To your Microsoft account, in eight steps.

A security key is the strongest sign-in you can have. It can't be phished, guessed or forwarded, and it's the sign-in method we set up for every account in a Managed uplift. Registering one takes about five minutes.

You'll need

Your security key

A FIDO2 key such as a YubiKey. If it's new, you'll set a PIN for it along the way.

On

A Windows PC

Signed in with your work account. The screens below are from Windows; other systems vary slightly.

Ideally

A second key

Register a backup too, so a lost or broken key never locks you out. Step 08 explains.

The steps

Eight steps, start to finish.

Step 01

Open the link above and select Add sign-in method.

Microsoft Security info page with the Add sign-in method link highlighted
Step 02

Choose Passkey.

Add a sign-in method dialog listing Passkey among the options
Step 03

Select Other options.

Sign in faster dialog with the Other options link below the description
Step 04 · If shown

If Windows offers to save to a phone, press Change at the bottom right.

Windows Security dialog offering to save the passkey to a phone or tablet, with a Change link
Step 05

Select Security key.

Windows Security dialog asking where to save the passkey, with Security key listed
Step 06

Enter your security key PIN, or set one if the key is new.

Windows Security dialog asking for the security key PIN
Step 07

Touch your security key when prompted. It's now added to your account.

Windows Security dialog asking you to touch your security key
Step 08

Name it, and keep track of which is your primary and which is your backup key.

Best practice · two keys

Register a primary for daily use and a backup stored safely. If one is lost or broken, the other still gets you in.

Screens shown are from Windows · steps may vary slightly on other systems or as Microsoft updates the flow.

Keep a copy

The same guide as a one-page PDF, for printing or sending round the firm. Stuck on a step? Managed clients can raise it as a support case.

Download PDF → Ask us