Microsoft will not accept my Yubico passkey

Question

After putting up with the constant prompts to use an alternative method to sign-in, I purchased a Yubico passkey C NFC (not cheap). I am trying to log into my Outlook email using the passkey. Microsoft says I cannot use that passkey and should try "a different one." I downloaded Yubico hardware and set up a PIN. I tried logging in again with the passkey and now Microsoft says the key does not look familiar and I should try another.

I'm trying to cooperate after resisting these prompts for months. I cannot use "Face" or "Touch" and for privacy reasons would not use them if I could on my work laptop.

Our IT Manager recommended this brand of passkey to use on my work computer.

I was really hoping to end this frustration and finally have the method set.

I cannot set up Windows Hello PIN on this work computer (I have it on my personal).

Can someone help? This passkey was not cheap.

Thanks in advance.

---

Moved from Outlook | Web | Outlook.com | Account management, security, and privacy

Answer 1

Hi Steven Dunn,

Thank you for contacting Microsoft Q&A, allow me to address your issue on bellow approaches

Here are the key points and workaround steps based on the relevant documents:

1. YubiKey Compatibility and Setup

• YubiKey is a supported hardware security key for Microsoft accounts and is a highly secure, phishing-resistant MFA method.
• For work/school accounts, you need a YubiKey Series 5 (including Series 5 FIPS) set up as a FIDO2 Security Key for MFA. YubiKey Series v.4 and 5.4 need to be replaced with newer versions.
• If you have multiple identity accounts, you can use the same YubiKey for different accounts, but you must register it for each account.

1. Supported Devices and Browsers

• Passkeys and YubiKey are supported on Windows 10 and newer, macOS Ventura and newer, ChromeOS 109 and newer, iOS 16 and newer, Android 9 and newer, and hardware security keys that support the FIDO2 protocol.
• Supported browsers include Microsoft Edge 109 or newer, Safari 16 or newer, and Chrome 109 or newer.

1. Signing in with YubiKey

• To sign in, insert your YubiKey, enter the PIN, and follow the prompts. If the key is already set up for another account, you may be asked to enter the existing PIN.
• If the YubiKey is not recognized, ensure it is registered as a security key for your Microsoft account. You can do this at https://account.live.com/proofs/manage for personal accounts or https://mysignins.microsoft.com/security-info for work/school account.
• If you see a message that the key does not look familiar, it may not be registered for your account or may not be compatible. Make sure you are using a supported YubiKey model and that it is properly registered.

1. Troubleshooting

• If your YubiKey is locked after incorrect PIN attempts, contact your admin to reset the PIN.
• If you cannot use Windows Hello PIN on your work computer, you can still use YubiKey as a security key if it is properly registered.
• If you experience issues with passkey recognition, try registering the YubiKey again or use another supported method such as Microsoft Authenticator App or passkey.
• For technical support, you can contact Microsoft Support via the links provided in the documents. Privacy Concerns Biometric data (face, fingerprint) stays on your device and is never shared with Microsoft. If you prefer not to use biometrics, you can use a PIN or security key.

Next Steps:

• Verify your YubiKey model is supported (Series 5 or newer).
• Register your YubiKey as a security key for your Microsoft account at the appropriate link.
• Use a supported browser and device.
• If issues persist, contact your IT admin or Microsoft Support via Services Hub for further assistance.

 

_If you believe this information adds some value, please accept the answer so that your experience with the issue would help contribute to the whole communi_ty.

Thanks and Regards!

Kate.

Answer 2

Can someone help with the passkey issue I described above. I followed the AI generated steps and the passkey was registered under my account security, but when I try to sign into my email using the passkey, Microsoft sends a message that it looks unfamiliar and tells me to use another one. I thought using the alternative sign-in method was supposed to be more efficient. This is complicated and time-consuming. Why won't Microsoft recognize the Yubico passkey?

Answer 3

The Yubico security key itself is supported, but the behavior described matches cases where the passkey either is not correctly registered with the Microsoft account, is no longer valid, or is blocked by organizational policy.

Use these checks and steps:

1. Confirm the passkey is actually registered to the Microsoft account
   • Sign in to the account using an existing method that still works (password, existing MFA, or another device).
   • Go to the security info page for the account (for a personal Microsoft account or work/school Entra ID, use the appropriate “Security info” / “My Security info” page referenced in the docs).
   • Verify whether a FIDO2/passkey entry for this Yubico key is listed.
   • If the key is not listed, it has never been successfully registered and must be added first.
2. Remove any invalid or “orphaned” passkeys
   • If there is a passkey entry that corresponds to this key but sign-in fails with messages like “key does not look familiar,” treat it as invalid.
   • Delete that passkey entry from the account’s Security info.
   • If the key was previously set up in an app (such as Microsoft Authenticator) or on a device and is no longer recognized, delete that local credential as well. This avoids an “orphaned passkey” situation where the credential exists on the device but not in Microsoft Entra ID.
3. Re‑register the Yubico key as a new passkey
   • While signed in with a working method, go back to Security info / My Security info.
   • Choose to add a new sign‑in method and select the FIDO2/passkey/security key option.
   • When prompted, insert/tap the Yubico key and enter the PIN that was set on the key.
   • Complete the prompts and give the key a recognizable name.
   • After successful registration, sign out and try signing in again using “Other ways to sign in” → “Face, fingerprint, PIN, or security key” and then use the Yubico key.
4. Check for organization policy blocks
   • Some organizations restrict which passkey providers or cross‑device methods are allowed. If the device shows prompts like “try a different key” or never offers the QR / cross‑device option, the tenant policy may be blocking this scenario.
   • In that case, the IT manager or Microsoft 365/Entra admin must review and configure passkey settings as described in the admin guidance linked from the troubleshooting article.
5. If the key was used via an app (Authenticator) and now fails
   • If the passkey was stored in Microsoft Authenticator and sign‑in shows messages like “We couldn’t use your device to verify your identity” or “This passkey can no longer be used,” the passkey is no longer valid.
   • Delete the invalid passkey from Authenticator and from the account’s Security info, then set up a new passkey.

If, after confirming registration and cleaning up invalid entries, the Yubico key still is not accepted, the next step is for the organization’s IT admin to verify that FIDO2/passkey sign‑in is enabled and that this type of key/provider is allowed in the tenant configuration.

---

References:

• Sign in with a passkey (FIDO2) for your work or school account
• Troubleshoot signing in with a passkey
• Set up a passkey in Microsoft Authenticator
• Frequently asked questions about passkey support in Microsoft Authenticator