How to Set Up a FIDO2 Security Key in Windows 11

Configuring a FIDO2 security key with Windows Hello provides a secure, phishing-resistant, and passwordless way to sign in to your Windows 11 PC and associated Microsoft accounts. This guide walks you through the exact steps required to set up, manage, and use your hardware security key (such as a YubiKey or Google Titan Key) on Windows 11.

Prerequisites

• A PC running Windows 11.
• A FIDO2/WebAuthn-compatible USB or NFC security key.
• A Microsoft Account (personal) or a Microsoft Entra ID (work/school account) connected to your PC.

Step 1: Access Security Key Settings

1. Plug your FIDO2 security key into an available USB port (or have your NFC key ready).
2. Open the Start Menu and select Settings (or press Win + I).
3. In the left sidebar, click on Accounts.
4. Select Sign-in options from the right-hand pane.

Step 2: Configure the Security Key

1. Scroll down the sign-in options list and click on Security key.
2. Click the Manage button.
3. When prompted, touch or tap your physical security key.
4. If this is a new key, you will be prompted to create a Security Key PIN. Enter a secure PIN and confirm it.
5. If your key supports biometric authentication (such as a fingerprint sensor), follow the on-screen prompts to register your fingerprint.
6. Click Done or Close once the setup process completes.

Step 3: Add the Security Key to Your Microsoft Account

To use the key for passwordless sign-ins on the web and across Windows services:

1. Open your browser and navigate to your Microsoft Account security page.
2. Sign in and go to Advanced security options.
3. Under Ways to prove who you are, select Add a new way to sign in or verify.
4. Choose Use a security key.
5. Select whether your key is USB or NFC, insert/tap your key, and enter your security key PIN.
6. Name your key so you can identify it later, then complete the setup.

How to Sign In Using Your FIDO2 Key

1. Lock your PC (Win + L) or sign out.
2. On the sign-in screen, select Sign-in options.
3. Click the Security Key icon (resembling a small USB key).
4. Insert your key into the USB port (or tap via NFC).
5. Enter the PIN you created for the key, then touch the key’s sensor when it blinks.
6. Windows will authenticate and log you into your desktop.