FIDO Security Keys

A passkey is a FIDO authentication credential based on FIDO standards, that allows a user to sign in to apps and websites with the same process that they use to unlock their device (biometrics, PIN, or pattern). Passkeys are FIDO cryptographic credentials that are tied to a user’s account on a website or application. With passkeys, users no longer need to enter usernames and passwords or additional factors. Instead, a user approves a sign-in with the same process they use to unlock their device (for example, biometrics, PIN, pattern).

Use the Windows 10/11 built-in tool to set up and manage your FIDO2 key:

1. Click Manage and follow the prompts to set or change your PIN.
2. Insert the FIDO2 key into your computer.
3. Open Settings > Accounts > Sign-in options > Security Key.

• Sign-in with your new passkey (FIDO2)
• Navigate to login.microsoftonline.com.
• Select Sign-in options.
• Choose Face, Fingerprint, PIN, or Security key.
• A security window opens. Follow the remaining prompts to sign-in with the method that you selected.

A FIDO key (or FIDO2 Security Key) is a small, physical hardware device used for strong, passwordless authentication, acting as a second factor for logging into accounts, replacing passwords with secure, cryptographically generated credentials that are resistant to phishing and other attacks, often by touching the key or entering a PIN.

Windows Hello can be used as a FIDO2 authenticator, enabling users to log into websites and applications that support FIDO2 without needing a password. Windows 10: With the April 2018 update, Windows 10 supports FIDO2 through Windows Hello and Microsoft Edge. Buy our Pro Model for WBF windows hello.

If your primary key is lost, you can use your backup key to access your account. After regaining access, you should unregister the lost key and register a new backup key.

To get and use a FIDO security key, you first purchase one (like Feitian, Token2, Yubikey, Thetis FIDO2 Security Key, Titan) from CopyShield Systems and then register it with your online accounts (Google, Microsoft, etc.) through their security settings, adding it as a sign-in method alongside your existing MFA, then use the key (insert/tap and touch/PIN) for passwordless logins, often requiring an initial setup with a PIN.

Step 1: Access the My Authenticators page. To begin the process of registering your FIDO security key, you must navigate to the My Authenticators page.
Step 2: Register your FIDO security key. Once you are on the My Authenticators page, follow the steps below to register your FIDO security key as an MFA authenticator.

A security key is a physical device that you can connect to your computer or mobile device to add an extra layer of protection to your Login.gov account. It is not the same as a personal key.