Set up your FIDO2 security key
Step 1 of 9
Set up a FIDO2 security key
This walkthrough helps you register a FIDO2 security key for Microsoft 365 sign-in using your Security info page.
How to sign in first
You will need
- A FIDO2 security key (USB, NFC, or Bluetooth as supported)
- Your work account username
- Either a valid TAP or an existing passkey
- A computer browser
- Internet access
Approximate duration: 5 to 10 minutes.
Privacy
Check prerequisites
Where: Computer browser and security key
- Connect your security key, or keep it ready for NFC/tap use.
- Close extra sign-in tabs to avoid confusion.
- Open aka.ms/mfasetup in your browser.
Computer browser screenshot to be added
Follow the written steps below until this browser screenshot is added.
Return to this guide when finished. Select Next to continue.
Can you sign in right now?
Gate 1: Do you already have an existing passkey?
Gate 2: Do you have a Temporary Access Pass (TAP)?
Cannot continue without sign-in
You do not currently have a usable sign-in path for this setup. Please contact support to request a Temporary Access Pass (TAP), then return to this guide.
You can change this later
Sign in to Security info
Where: Computer browser
Path A: Sign in with TAP
- Sign in to aka.ms/mfasetup.
- Select Use Temporary Access Pass (wording may vary).
- Enter your TAP from your onboarding email.
- Continue until the Security info page loads.
Path B: Sign in with existing passkey
- Sign in to aka.ms/mfasetup.
- Select your existing passkey sign-in option.
- Complete biometric or PIN approval on your phone/device.
- Continue until the Security info page loads.
- Sign in to aka.ms/mfasetup.
- Use TAP if this is your first strong sign-in setup.
- Use your existing passkey if one is already registered.
- Continue until the Security info page loads.
Important
Computer browser screenshot to be added
Follow the written steps below until this browser screenshot is added.
Return to this guide when finished. Select Next to continue.
Add a new sign-in method
Where: Computer browser
- Select Add sign-in method.
- Choose Security key (FIDO2).
- Select the key type shown (USB device, NFC device, or Bluetooth device).
- Select Next.
Computer browser screenshot to be added
Follow the written steps below until this browser screenshot is added.
Return to this guide when finished. Select Next to continue.
Is this a new security key?
Before you register: is this a new security key?
Forgot key PIN?
If you do not know the existing key PIN, you must reset the key before it can be registered again. Reset removes existing registrations on that key.
Register your security key
Where: Computer browser and physical security key
Path A: New key registration
- When prompted, interact with your key (insert/tap/press button).
- Create a new key PIN when asked.
- Confirm the key PIN.
- Complete biometric verification on the key if supported.
- Name the key clearly (for example: Work YubiKey Primary).
- Finish registration.
Path B: Existing key registration
- When prompted, interact with your key (insert/tap/press button).
- Enter the existing key PIN.
- Complete biometric verification on the key if supported.
- Name the key clearly (for example: Work YubiKey Primary).
- Finish registration.
If you do not know the key PIN, reset the key first, then return and choose the new key path.
- When prompted, interact with your key (insert/tap/press button).
- Create or enter a key PIN if asked.
- Complete verification and finish registration.
Computer browser screenshot to be added
Follow the written steps below until this browser screenshot is added.
My key is not detected
- Try a different USB port.
- Reinsert the key and press its button when prompted.
- If using NFC, hold the key to the phone/reader longer.
- Restart the browser and try again.
Return to this guide when finished. Select Next to continue.
Test your FIDO2 sign-in
Where: Computer browser and physical security key
- Sign out of your account in a new browser tab.
- Start a fresh sign-in.
- Select Sign in with security key if needed.
- Use your key to complete sign-in.
Computer browser screenshot to be added
Follow the written steps below until this browser screenshot is added.
Return to this guide when finished. Select Next to continue.
Your FIDO2 setup is ready
Your FIDO2 security key is now registered for your account.
Setup complete. Keep your security key in a safe place.
Consider registering a backup security key for account recovery resilience.