Register a passkey (FIDO2) with a FIDO2 security key - Microsoft Entra ID (2024)

This article shows how to register a passkey as an authentication method.

First-time registration

1. First-time users need to register a passkey (FIDO2) as an authentication method by navigating and completing the process from a browser at My Security info.

2. TapAdd sign-in method>Choose a method>Passkey (preview) >Add.

3. Sign in with multifactor authentication (MFA) before adding a passkey (FIDO2), then tapNext.

   

4. Select where you want to save your passkey (FIDO2).

   Note

   Options displayed vary depending on your browser and device operating system. If the device where you started the registration process supports passkeys (FIDO2), you'll be asked to save the passkey to that device. Select Use another device or More options to display additional ways for you to save the passkey.

   

5. (Optional) If you previously set up a passkey (FIDO2) on a mobile device and selected the option to remember that device for quicker sign-in, the device name may appear as a selectable option. In this case, do the following steps:

   See Also

   TOKEN2 Sàrl is a Swiss cybersecurity company specialized in the area of multifactor authentication. We are a FIDO Alliance member.
   1. Choose Security key.
   2. Follow the prompts to connect your security key and provide a PIN or biometric method.
   3. Upon completion, you're redirected to the My Security info screen, where you can change the default name for the new sign-in method.
   4. Select Doneto finish registering the new method.

Prompted registration

1. If your organization requires you to register a passkey (FIDO2), you’ll be prompted after sign-in to add a passkey (FIDO2).

   

2. Tap Next, then you're directed to login.microsoft.com.

3. Select where you would like to save your passkey (FIDO2).

   Note

   Options displayed vary depending on your browser and device operating system. If the device where you started the registration process supports passkeys (FIDO2), you'll be asked to save the passkey (FIDO2) to that device. Select Use another device or More options displays additional ways for you to save the passkey.

   

4. (Optional) If you previously set up a passkey (FIDO2) on a mobile device and selected the option to remember that device for quicker sign-in, the device name may appear as a selectable option. In this case, do the following steps:

   1. Choose Security key.
   2. Follow the prompts to connect your security key and provide a PIN or biometric method.
   3. Upon completion, you're redirected to the My Security info screen, where you can change the default name for the new sign-in method.
   4. Select Doneto finish registering the new method.

Sign-in with your new passkey (FIDO2)

1. Navigate to login.microsoftonline.com.

   

2. Select Sign-in options.

   

3. Choose Face, Fingerprint, PIN, or Security key.

4. A security window opens. Follow the remaining prompts to sign-in with the method that you selected.

Next steps

• Choosing authentication methods for your organization
• Register security keys on behalf of users