hello i cant turn off windows hello security key

Question

hello i cant turn off windows security key beacause i dont have one and i dont know how i set it up but i cant turn it off

Answer 1

Hello Beni Tóth,
Thank you for posting in Q&A forum.
The “Security Key” section in Windows’ Sign‐in Options (usually seen in Windows 10/11) is always present as part of the Windows Hello suite—even if you aren’t using one. In most cases, if you haven’t registered a security key, you won’t be using that method to sign in.

However, if you want to remove or block the functionality entirely (for example, in an organization or if you don’t want anyone using a security key), here is the suggestion for your reference:

1. Remove a Registered Security Key (For Individual Users)

If you’d registered a security key and just want to remove it so that it’s no longer available as an option, you can do the following:  

1.Open Settings.  

2.Navigate to Accounts > Sign‑in options.  

3.In the “Security Key” section, click on “Manage” (or “Remove,” if available).  

4.Follow the prompts to deregister or remove the key.

5.Note that once removed, you simply aren’t using that method—but the “Security Key” entry will still appear in Settings.

2. Remove or Hide the Security Key Option (For Administrators/Enterprise)

If you want to “disable” or hide the option entirely so that end users don’t see or use it, you’ll need a policy-based solution. There are two common methods:

Group Policy

In environments using an Active Directory Group Policy, you can restrict Windows Hello features. Although Microsoft does not currently offer a single “disable Security Key” policy, you can disable Windows Hello for Business entirely. This, however, also disables other Windows Hello options (like facial recognition or PIN), so check if it suits your organization’s policies.  

Azure AD (for Azure-enrolled/Cloud-Managed devices)  

If your organization uses Azure AD, you can disable FIDO2 Security Key authentication through the Azure Portal. In Azure AD, under “Security” → “Authentication methods,” you can control which methods are available for users. By turning off support for FIDO2 security keys there, users won’t be able to register or use them—even though the Settings page may still show the option, it won’t be functional.

Allow or block specific FIDO2 security keys in Azure

https://blog.workinghardinit.work/2021/10/06/allow-or-block-specific-fido2-security-keys-in-azure/#:~:text=You%20do%20this%20in%20the%20Azure%20portal%20by,on%20FIDO2%20Security%20Key%20to%20enter%20its%20settings.

Here is a similar thread for your reference.

https://answers.microsoft.com/en-us/windows/forum/all/cant-remove-security-key/4768d1ce-d75a-4abd-87c2-12533e986c82

Other references

https://support.microsoft.com/en-us/account-billing/set-up-a-security-key-as-your-verification-method-2911cacd-efa5-4593-ae22-e09ae14c6698#:~:text=Delete%20a%20security%20key%20from%20your%20security%20info,Select%20OK%20from%20the%20Delete%20security%20key%20box

https://support.microsoft.com/en-us/topic/sign-in-to-your-account-with-a-security-key-b23a2a45-6ab8-4c86-9f22-bcadf60235aa

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.