Your security key must be both FIDO2 and Microsoft-compliant. You have a physical security key approved by your administrator or your organization. You're on a device running the Windows Update and using a supported browser.

Your administrator has turned on this feature for use within your organization. Before you beginīefore you can register your security key, the following conditions must all be met: For more information about Windows Hello, see Windows Hello overview.

Note: If you're unable to use a FIDO2 security key, there are other passwordless verification methods you can use such as the Microsoft Authenticator app or Windows Hello. You can find out more information about your security key, including what type it is, from the manufacturer's documentation. There are different types of security keys you can use, for example a USB key that you plug in to your device or an NFC key that you tap on an NFC reader. Your administrator or your organization will provide you with a security key if they require it for your work or school account. These keys allow you to sign in to your work or school account to access your organization's cloud-based resources when on a supported device and web browser.

We currently support several designs and providers of security keys using the Fast Identity Online (FIDO2) passwordless authentication protocols. In this case, you'll need to choose another method or contact your organization's help desk for more assistance.īefore you can register a security key, you must have at least one additional security verification method registered. If you don't see the security key option, it's possible that your organization doesn't allow you to use this option for verification.

Azure u2f