O365: How to: set up the YubiKey for Microsoft

Set up the YubiKey for Microsoft

Login to Microsoft

  1. On the user's computer, open Security info: https://mysignins.microsoft.com/security-info
  2. Sign in to the user's work/school account and complete the existing MFA challenge.
  3. Select Add sign-in method → Passkey → Next.

Image of the Microsoft Security Settings.

Image of the list of the Authentication options

Image of the Next screen

 

  1. When Microsoft asks where to save the passkey, select Security key. Note: You may need to select Use another device or More options first.

Windows Security with the 2 biometric options listed

 

Insert the YubiKey into the USB port

Image of the first message from Windows security, confirming the email of the user.

Second Confirmation popup

  1. Follow the Windows/browser prompt to create or enter the YubiKey's PIN, then physically touch the YubiKey when prompted.

Popup to create the PIN

Confirmation that the YubiKey is set up

Microsoft will then let you name the Security Key for later.

Image of the popup to name the Key

Microsoft returns you to Security info. Give the new sign-in method a recognizable name and select Done.

Microsoft identifies a FIDO2 security key as a device-bound passkey where the private key remains on the physical security key.

Print Article