OIT Office of Information Technology
| Menu

Microsoft 365 Multi-Factor Authentication - Set Up a YubiKey (Mac)

Use these instructions to set up a YubiKey or other security key for use with Microsoft 365 multi-factor authentication (MFA) on a Mac. To access and update your current Microsoft MFA settings, use the Find and Update Your Security Info tutorial. Learn more about Microsoft MFA.


OS:
Layout:
one column
two columns

Step 1

On your Mac, open a new incognito/private Google Chrome window and go to the Microsoft 365 My Account page.

Please note: This process can only be completed in Google Chrome or Microsoft Edge.

Step 2

Log in using your IdentiKeyUsername@colorado.edu email address and IdentiKey password, then complete Microsoft MFA using your previously configured authentication method.

Please note: If you have not yet set up Microsoft Authenticator on your smartphone, you will be prompted to do so. Microsoft does not allow you to skip phone setup and go straight to using a YubiKey.

Step 3

In the left-hand menu, select My Account, Security Info, then Add sign-in method.

Step 4

Choose the option for Passkey.

Step 5

Select Next.

Step 6

Microsoft will guide you through several prompts before opening a Google Chrome Security dialogue. By default, it will try to save the passkey to your device. Select Save another way to save the passkey to your YubiKey.

Step 7

Select Use a phone, tablet, or security key.

Step 8

If using a YubiKey, you can ignore the QR code and follow the instructions below for "Use your security key." Simply touch the sensor on your security key to continue.

Step 9

When prompted, create a PIN for your YubiKey or, if you have used this YubiKey before, enter the PIN you already created for it.

Step 10

When prompted, touch the capacitive touch sensor on your YubiKey to confirm.

Step 11

Enter a name to help identify your passkey. This can be anything you want, and can be helpful for unique identification if you replace your YubiKey or if you own multiple YubiKeys.

Step 12

Confirm your Passkey was created on your YubiKey.

Step 13

Verify the YubiKey is now included in the list of approved sign-in methods.

Step 14

To switch to using your YubiKey for logins, sign out of the Microsoft portal and sign back in. When prompted, select Sign in another way.

Step 15

Select the option that includes security keys.

Step 16

Select the option for Security Key, then click Continue.

Step 17

When prompted, touch the sensor on your YubiKey. Enter your PIN, then click Continue.

Step 18

Touch the sensor on your YubiKey to confirm and complete login.