Entra.News Dailydaily.entra.news
Aboutmerill.net
Microsoft Entra ID

Register a passkey with a FIDO2 security key

7 July 2026Updated+29 / −41 lines

In brief

Learn how to register a passkey with a FIDO2 security key in Microsoft Entra ID. Use Security info or a prompted sign-in flow.

Documentation change

Register a passkey (FIDO2) with a FIDO2 security key

Register a passkey with a FIDO2 security key

FIDO2 security keys are device-bound passkeys stored on a physical authenticator. The private key never leaves the security key, which provides strong protection against remote phishing attacks. Security keys are recommended for highly regulated industries or users with elevated privileges.

This article shows how to register a passkey as an authentication method by using a FIDO2 security key.

This article shows how to register a passkey as an authentication method by using a FIDO2 security key. After registration, you can sign in with the security key.

First-time registration

  1. First-time users need to register a passkey (FIDO2) as an authentication method by navigating and completing the process from a browser at Security info.
  2. Tap Add sign-in method > Choose a method > Passkey > Add.
  3. Sign in with multifactor authentication (MFA) before adding a passkey (FIDO2), then tap Next.

To register a passkey for the first time, open Security info in a web browser to complete the registration.

:::image type="content" border="true" source="media/how-to-register-passkey-with-security-key/add-passkey.png" alt-text="Screenshot of the Add a passkey (FIDO2) option in My Security info.":::

  1. Open a web browser and sign in to Security info.
  2. Sign in with multifactor authentication (MFA).
  3. Tap Add sign-in method > Choose a method > Passkey.
  4. Tap Next.
  1. Select where you want to save your passkey (FIDO2).

:::image type="content" border="true" source="media/how-to-register-passkey-with-security-key/choose-where-store-passkey.png" alt-text="Screenshot of the dialog where to save your passkey (FIDO2) in My Security info.":::

  1. (Optional) If you previously set up a passkey (FIDO2) on a mobile device and selected the option to remember that device for quicker sign-in, the device name may appear as a selectable option. In this case, do the following steps:
  1. (Optional) If you previously set up a passkey (FIDO2) on a mobile device and selected the option to remember that device for quicker sign-in, the device name might appear as a selectable option. In this case, do the following steps:
  1. Choose Security key.
  2. Follow the prompts to connect your security key and provide a PIN or biometric method.
  1. Upon completion, you're redirected to the My Security info screen, where you can change the default name for the new sign-in method.
  1. After you complete these steps, you're redirected to the My Security info screen, where you can change the default name for the new sign-in method.
  1. Select Done to finish registering the new method.

Prompted registration

  1. If your organization requires you to register a passkey (FIDO2), you’ll be prompted after sign-in to add a passkey (FIDO2).

If your organization requires you to register a passkey (FIDO2), you're prompted after sign-in.

:::image type="content" border="true" source="media/how-to-register-passkey-with-security-key/inline-registration.png" alt-text="Screenshot of the Add a passkey (FIDO2) option for a more secure sign-in in My Security info.":::

  1. When you see the prompt to add a passkey (FIDO2), tap Next.
  1. Tap Next, then you're directed to login.microsoftonline.com.
  2. Select where you would like to save your passkey (FIDO2).
  1. You're directed to login.microsoftonline.com.
  2. Select where you want to save your passkey (FIDO2).

:::image type="content" border="true" source="media/how-to-register-passkey-with-security-key/choose-where-store-passkey.png" alt-text="Screenshot of the prompt where to store your passkey (FIDO2) in My Security info.":::

  1. (Optional) If you previously set up a passkey (FIDO2) on a mobile device and selected the option to remember that device for quicker sign-in, the device name may appear as a selectable option. In this case, do the following steps:
  1. (Optional) If you previously set up a passkey (FIDO2) on a mobile device and selected the option to remember that device for quicker sign-in, the device name might appear as a selectable option. In this case, do the following steps:
  1. Choose Security key.
  2. Follow the prompts to connect your security key and provide a PIN or biometric method.
  1. Upon completion, you're redirected to the My Security info screen, where you can change the default name for the new sign-in method.
  1. After you complete these steps, you're redirected to the My Security info screen, where you can change the default name for the new sign-in method.
  1. Select Done to finish registering the new method.

Sign-in with your new passkey (FIDO2)

  1. Navigate to login.microsoftonline.com.

    :::image type="content" border="true" source="media/how-to-register-passkey-with-security-key/sign-in-microsoft.png" alt-text="Screenshot of the sign in to Microsoft prompt.":::

  2. Select Sign-in options.

    :::image type="content" border="true" source="media/how-to-register-passkey-with-security-key/sign-in-options.png" alt-text="Screenshot of the sign in options for Microsoft.":::

  3. Choose Face, Fingerprint, PIN, or Security key.

  4. A security window opens. Follow the remaining prompts to sign-in with the method that you selected.

Next steps

Related content