OIT Office of Information Technology
| Menu

Microsoft 365 Multi-Factor Authentication - Set Up a YubiKey (Windows)

Use these instructions to set up a YubiKey or other security key for use with Microsoft 365 multi-factor authentication (MFA) on a Windows computer. To access and update your current Microsoft MFA settings, use the Find and Update Your Security Info tutorial. Learn more about Microsoft MFA.


OS:
Layout:
one column
two columns

Step 1

On your Windows computer, open a web browser and go to the Microsoft 365 My Account page.

Step 2

Log in using your IdentiKeyUsername@colorado.edu email address and IdentiKey password, then complete Microsoft MFA using your previously configured authentication method.

Please note: If you have not yet set up Microsoft Authenticator on your smartphone, you will be prompted to do so. Microsoft does not allow you to skip phone setup and go straight to using a YubiKey.

Step 3

In the left-hand menu, select My Account, Security info, then Add sign-in method.

Step 4

Select Passkey (do not select Passkey in Microsoft Authenticator).

Step 5

Click Next.

Step 6

Are you using Google Chrome?

  • Yes: Continue to Step 7.
  • No: Skip to Step 9.

Step 7

You may see a prompt asking you to "Create a passkey to sign in to login.microsoft.com?" If you see this prompt, select Save another way.

Step 8

Select Use an external security key on the follow-up prompt. Do not save the key in Google Password Manager.

Step 9

You should now see a gray window entitled "Windows Security" with the heading "Security key setup." Click OK.

Step 10

On the follow-up prompt with the heading "Continue setup," click OK.

Step 11

If prompted to do so, insert your YubiKey.

Step 12

When prompted, create a PIN for your YubiKey or, if you have used this YubiKey before, enter the PIN you already created for it.

Step 13

When prompted, touch the capacitive touch sensor on your YubiKey to confirm.

Step 14

Enter a name to help identify your passkey. This can be anything you want, and can be helpful for unique identification if you replace your YubiKey or if you own multiple YubiKeys.

Troubleshooting

Errors are not uncommon when attempting to set up a YubiKey. If you end up seeing a message entitled "Passkey not registered," here are some helpful tricks that can resolve the problem.

Step 1

Remove your YubiKey from your computer's USB port.

Step 2

Close all browser windows, then re-launch your browser.

Step 3

Navigate back to https://myaccount.microsoft.com in the new browser, and only insert your YubiKey when prompted on step 5 of the regular instructions above.

Step 4

If that still fails, remove your YubiKey from your computer's USB port and try again using a different browser. For example, if you normally use Google Chrome, try Firefox or Microsoft Edge.