Edit

Share via

Register a passkey (FIDO2)

  • Article

This article shows how to register a passkey as an authentication method.

First-time registration

  1. First-time users need to register a passkey (FIDO2) as an authentication method by navigating and completing the process from a browser at Security info.

  2. Tap Add sign-in method > Choose a method > **Passkey > Add.

  3. Sign in with multifactor authentication (MFA) before adding a passkey (FIDO2), then tap Next.

    Screenshot of the Add a passkey (FIDO2) option in My Security info.

  4. Select where you want to save your passkey (FIDO2).

    Note

    Options displayed vary depending on your browser and device operating system. If the device where you started the registration process supports passkeys (FIDO2), you'll be asked to save the passkey to that device. Select Use another device or More options to display additional ways for you to save the passkey.

    Screenshot of the dialog where to save your passkey (FIDO2) in My Security info.

  5. (Optional) If you previously set up a passkey (FIDO2) on a mobile device and selected the option to remember that device for quicker sign-in, the device name may appear as a selectable option. In this case, do the following steps:

    1. Choose Security key.
    2. Follow the prompts to connect your security key and provide a PIN or biometric method.
    3. Upon completion, you're redirected to the My Security info screen, where you can change the default name for the new sign-in method.
    4. Select Done to finish registering the new method.

Prompted registration

  1. If your organization requires you to register a passkey (FIDO2), you’ll be prompted after sign-in to add a passkey (FIDO2).

    Screenshot of the Add a passkey (FIDO2) option for a more secure sign-in in My Security info.

  2. Tap Next, then you're directed to login.microsoft.com.

  3. Select where you would like to save your passkey (FIDO2).

    Note

    Options displayed vary depending on your browser and device operating system. If the device where you started the registration process supports passkeys (FIDO2), you'll be asked to save the passkey (FIDO2) to that device. Select Use another device or More options displays additional ways for you to save the passkey.

    Screenshot of the prompt where to store your passkey (FIDO2) in My Security info.

  4. (Optional) If you previously set up a passkey (FIDO2) on a mobile device and selected the option to remember that device for quicker sign-in, the device name may appear as a selectable option. In this case, do the following steps:

    1. Choose Security key.
    2. Follow the prompts to connect your security key and provide a PIN or biometric method.
    3. Upon completion, you're redirected to the My Security info screen, where you can change the default name for the new sign-in method.
    4. Select Done to finish registering the new method.

Sign-in with your new passkey (FIDO2)

  1. Navigate to login.microsoftonline.com.

    Screenshot of the sign in to Microsoft prompt.

  2. Select Sign-in options.

    Screenshot of the sign in options for Microsoft.

  3. Choose Face, Fingerprint, PIN, or Security key.

  4. A security window opens. Follow the remaining prompts to sign-in with the method that you selected.

Next steps