Security Keys User Guide

Click on the accordion boxes below to learn how to perform common tasks with your security key once it has been set up. For information on how to set up a security key, please visit our security key info page.

To change your security key's PIN or password:

  1. Open the "Settings" app of any Windows PC
  2. Click the "Accounts" box
  3. Go to "Sign-in Options" on the left-hand bar
  4. Click "Security Key" and go to "Manage"
  5. You will be asked to touch your security key. When done, you will be presented with the option to change your key's PIN or password. Click "Change," and enter your new PIN or password.

GIF showing steps listed for how to change Security Key PIN

To change your default MFA method to your security key, first go to

  1. From the "Security Info" tab, locate the current default sign-in method above the device list.
  2. Make sure that your default sign-in method says "Authenticator app or hardware token - code."
  3. Leave the site and sign into a program that requires MFA.
  4. If asked to enter a code, click "Sign in another way"
  5. Click "Use a security key"
  6. Enter your security key's PIN and touch the key when prompted
  7. Your security key is now the default MFA method.

GIF showing how to set security keys as the default MFA method

To remove a key from MFA, go to

  1. From the Security Info screen, locate your security key in the device list.
  2. Click "Delete"
  3. You will be redirected to a sign-in screen. Sign in again, then click "Delete" once more.
  4. Click "Ok" and your key will be deleted.

Your security key will remain functional outside the US. As long as you have an internet connection, your key will continue to work as normal.

For information on how to register a security key on Azure AD, see Microsoft's "Enable passwordless authentication method" section of their article on the topic.

For information on removing a key from Azure AD, see Microsoft's "Disable a key" section of their article on the topic.