Setting up a security key

What is a security key?

You can use security keys as a passwordless sign-in method for your University IT account. A security key is a physical device that's used with a unique PIN to sign in.

Security keys are more secure because you must have the physical device and know your PIN.

There are different types of security keys you can use. For example, a USB key that you plug in to your device or an NFC key that you tap on an NFC reader.

How do I get a security key?

You can buy a security key, or use one that you already own. Make sure it is FIDO2 compliant and compatible with Microsoft. There are many products available, such as the YubiKey 5C NFC.

Before you begin

You'll need:

• A device running the Windows 10 May 2019 Update and a supported browser
• A physical security key that is both FIDO2 and Microsoft-compliant

Register your security key

You must create your security key and give it a unique PIN before you can use it to sign in to your University IT account.

1. Go to the My Profile page at My Account and sign in if you haven't already done so.
    
2. Select "Security Info", select "Add method", and then select "Security key" from the Add a method list.
    
3. Select "Add", and then select the type of security key you have, either USB device or NFC device.
   Note: Refer to the manufacturer's documentation if you aren't sure which type of security key you have. 
    
4. Make sure that you have your security key to hand, and then on the Security key page, select "Next".
    
5. In the Setting up your new sign-in method page, select "Next", and then:
   • If your security key is a USB device, insert your security key into the USB port of your device.
   • If your security key is an NFC device, tap your security key to your reader.
      
6. Chrome or Edge browsers might first try to register a passkey already stored on a mobile device. You can still register your security key:
   • From Windows 11 version 23H2 onwards, you can sign in and click "Next". Below More choices, choose "Security key" and click "Next".
   • Earlier versions of Windows may show you a QR code to register a passkey already stored on another mobile device. To register your security key instead, insert your security key and touch it to continue.
      
7. Type your unique security key PIN into the Windows security box, and then select "OK". You'll return to the Setting up your new sign-in method box.
    
8. Select "Next".
    
9. Return to the Security info page. Type a name you'll recognise later for your new security key, and then select "Next".
    
10. Select "Done" to close the Security key page.

Microsoft guides

• Set up a security key as your verification method