To change your security key's PIN or password:

1. Open the "Settings" app of any Windows PC
2. Click the "Accounts" box
3. Go to "Sign-in Options" on the left-hand bar
4. Click "Security Key" and go to "Manage"
5. You will be asked to touch your security key. When done, you will be presented with the option to change your key's PIN or password. Click "Change," and enter your new PIN or password.

To change your default MFA method to your security key, first go to aka.ms/mfasetup.

1. From the "Security Info" tab, locate the current default sign-in method above the device list.
2. Make sure that your default sign-in method says "Authenticator app or hardware token - code."
3. Leave the site and sign into a program that requires MFA.
4. If asked to enter a code, click "Sign in another way"
5. Click "Use a security key"
6. Enter your security key's PIN and touch the key when prompted
7. Your security key is now the default MFA method.

To remove a key from MFA, go to aka.ms/mfasetup.

1. From the Security Info screen, locate your security key in the device list.
2. Click "Delete"
3. You will be redirected to a sign-in screen. Sign in again, then click "Delete" once more.
4. Click "Ok" and your key will be deleted.

Your security key will remain functional outside the US. As long as you have an internet connection, your key will continue to work as normal.

For information on how to register a security key on Azure AD, see Microsoft's "Enable passwordless authentication method" section of their article on the topic.

For information on removing a key from Azure AD, see Microsoft's "Disable a key" section of their article on the topic.