Microsoft Entra ID

Register a passkey with a FIDO2 security key

7 July 2026Updated+29 / −41 lines

In brief

Learn how to register a passkey with a FIDO2 security key in Microsoft Entra ID. Use Security info or a prompted sign-in flow.

What Entra admins need to know

Review the documentation change to determine whether it affects tenant configuration, security posture, or rollout plans.

This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.

Documentation change

Open on Microsoft Learn ↗

The comparison below is an extract of the Microsoft Learn article showing only the changed content. Open the full article for complete context.

Register a passkey (FIDO2) with a FIDO2 security key

FIDO2 security keys are device-bound passkeys stored on a physical authenticator. The private key never leaves the security key, which provides strong protection against remote phishing attacks. Security keys are recommended for highly regulated industries or users with elevated privileges.

This article shows how to register a passkey as an authentication method by using a FIDO2 security key. After registration, you can sign in with the security key.

First-time registration

~~First-time users need to~~To register a passkey ~~(FIDO2) as an~~for the first time, open Security info in a web browser to complete the registration.
1. Open a web browser and sign in to Security info.
2. Sign in with multifactor authentication ~~method by navigating and completing the process from a browser at Security info~~(MFA).
3. Tap Add sign-in method > Choose a method > Passkey > ~~Add~~.
4. ~~Sign in with multifactor authentication (MFA) before adding a passkey (FIDO2), then tap~~Tap Next.
  ~~:::image type="content" border="true" source="media/how-to-register-passkey-with-security-key/add-passkey.png" alt-text="Screenshot of the Add a passkey (FIDO2) option in My Security info.":::~~
5. Select where you want to save your passkey (FIDO2).
Note
Options displayed vary depending on your browser and device operating system. If the device where you started the registration process supports passkeys (FIDO2), you'll be asked to save the passkey to that device. Select Use another device or More options to display additional ways for you to save the passkey.
1. (Optional) If you previously set up a passkey (FIDO2) on a mobile device and selected the option to remember that device for quicker sign-in, the device name might appear as a selectable option. In this case, do the following steps:
  1. Choose Security key.
  2. Follow the prompts to connect your security key and provide a PIN or biometric method.
  3. After you complete these steps, you're redirected to the My Security info screen, where you can change the default name for the new sign-in method.
  4. Select Done to finish registering the new method.
Prompted registration

If your organization requires you to register a passkey (FIDO2), you're prompted after sign-in.
1. When you see the prompt to add a passkey (FIDO2), tap Next.
2. You're directed to login.microsoftonline.com.
3. Select where you want to save your passkey (FIDO2).
Note
Options displayed vary depending on your browser and device operating system. If the device where you started the registration process supports passkeys (FIDO2), you'll be asked to save the passkey (FIDO2) to that device. Select Use another device or More options to display additional ways for you to save the passkey.
1. (Optional) If you previously set up a passkey (FIDO2) on a mobile device and selected the option to remember that device for quicker sign-in, the device name might appear as a selectable option. In this case, do the following steps:
  1. Choose Security key.
  2. Follow the prompts to connect your security key and provide a PIN or biometric method.
  3. After you complete these steps, you're redirected to the My Security info screen, where you can change the default name for the new sign-in method.
  4. Select Done to finish registering the new method.
Related content

@@ -1,78 +1,66 @@ ----title: Register a passkey (FIDO2) with a FIDO2 security key-description: User registration of a passkey (FIDO2) with a FIDO2 security key.--services: active-directory+title: Register a passkey with a FIDO2 security key+description: Learn how to register a passkey with a FIDO2 security key in Microsoft Entra ID. Use Security info or a prompted sign-in flow. ms.topic: how-to-ms.date: 10/28/2025+ms.date: 07/05/2026 ms.reviewer: kimhana ms.collection: M365-identity-device-management-# Customer intent: As an identity administrator, I want to understand... +ai-usage: ai-assisted+ms.custom: msecd-doc-authoring-1013+# Customer intent: As an identity administrator, I want to understand how users register a passkey with a FIDO2 security key.  ----# Register a passkey (FIDO2) with a FIDO2 security key+# Register a passkey with a FIDO2 security key++FIDO2 security keys are device-bound passkeys stored on a physical authenticator. The private key never leaves the security key, which provides strong protection against remote phishing attacks. Security keys are recommended for highly regulated industries or users with elevated privileges. -This article shows how to register a passkey as an authentication method by using a FIDO2 security key. +This article shows how to register a passkey as an authentication method by using a FIDO2 security key. After registration, you can [sign in with the security key](how-to-security-key-sign-in.md).  ## First-time registration -1. First-time users need to register a passkey (FIDO2) as an authentication method by navigating and completing the process from a browser at [Security info](https://mysignins.microsoft.com/security-info).-1. Tap **Add sign-in method** > **Choose a method** > **Passkey** > **Add**.-1. Sign in with multifactor authentication (MFA) before adding a passkey (FIDO2), then tap **Next**.+To register a passkey for the first time, open [Security info](https://mysignins.microsoft.com/security-info) in a web browser to complete the registration. -   :::image type="content" border="true" source="media/how-to-register-passkey-with-security-key/add-passkey.png" alt-text="Screenshot of the Add a passkey (FIDO2) option in My Security info.":::+1. Open a web browser and sign in to [Security info](https://mysignins.microsoft.com/security-info).+1. Sign in with multifactor authentication (MFA).+1. Tap **Add sign-in method** > **Choose a method** > **Passkey**.+1. Tap **Next**.  1. Select where you want to save your passkey (FIDO2).      > [!NOTE]    > Options displayed vary depending on your browser and device operating system. If the device where you started the registration process supports passkeys (FIDO2), you'll be asked to save the passkey to that device. Select **Use another device** or **More options** to display additional ways for you to save the passkey.  -   :::image type="content" border="true" source="media/how-to-register-passkey-with-security-key/choose-where-store-passkey.png" alt-text="Screenshot of the dialog where to save your passkey (FIDO2) in My Security info.":::--1. (Optional) If you previously set up a passkey (FIDO2) on a mobile device and selected the option to remember that device for quicker sign-in, the device name may appear as a selectable option. In this case, do the following steps: +1. (Optional) If you previously set up a passkey (FIDO2) on a mobile device and selected the option to remember that device for quicker sign-in, the device name might appear as a selectable option. In this case, do the following steps:     1. Choose **Security key**.    1. Follow the prompts to connect your security key and provide a PIN or biometric method. -   1. Upon completion, you're redirected to the **My Security info** screen, where you can change the default name for the new sign-in method. +   1. After you complete these steps, you're redirected to the **My Security info** screen, where you can change the default name for the new sign-in method.     1. Select **Done** to finish registering the new method.  ## Prompted registration -1. If your organization requires you to register a passkey (FIDO2), you’ll be prompted after sign-in to add a passkey (FIDO2).+If your organization requires you to register a passkey (FIDO2), you're prompted after sign-in. -   :::image type="content" border="true" source="media/how-to-register-passkey-with-security-key/inline-registration.png" alt-text="Screenshot of the Add a passkey (FIDO2) option for a more secure sign-in in My Security info.":::+1. When you see the prompt to add a passkey (FIDO2), tap **Next**. -1. Tap **Next**, then you're directed to `login.microsoftonline.com`. -1. Select where you would like to save your passkey (FIDO2).+1. You're directed to `login.microsoftonline.com`.+1. Select where you want to save your passkey (FIDO2).     > [!NOTE]-   > Options displayed vary depending on your browser and device operating system. If the device where you started the registration process supports passkeys (FIDO2), you'll be asked to save the passkey (FIDO2) to that device. Select **Use another device** or **More options** displays additional ways for you to save the passkey. +   > Options displayed vary depending on your browser and device operating system. If the device where you started the registration process supports passkeys (FIDO2), you'll be asked to save the passkey (FIDO2) to that device. Select **Use another device** or **More options** to display additional ways for you to save the passkey.  -   :::image type="content" border="true" source="media/how-to-register-passkey-with-security-key/choose-where-store-passkey.png" alt-text="Screenshot of the prompt where to store your passkey (FIDO2) in My Security info.":::--1. (Optional) If you previously set up a passkey (FIDO2) on a mobile device and selected the option to remember that device for quicker sign-in, the device name may appear as a selectable option. In this case, do the following steps: +1. (Optional) If you previously set up a passkey (FIDO2) on a mobile device and selected the option to remember that device for quicker sign-in, the device name might appear as a selectable option. In this case, do the following steps:     1. Choose **Security key**.    1. Follow the prompts to connect your security key and provide a PIN or biometric method. -   1. Upon completion, you're redirected to the **My Security info** screen, where you can change the default name for the new sign-in method. +   1. After you complete these steps, you're redirected to the **My Security info** screen, where you can change the default name for the new sign-in method.     1. Select **Done** to finish registering the new method. -## Sign-in with your new passkey (FIDO2)--1. Navigate to `login.microsoftonline.com`.--   :::image type="content" border="true" source="media/how-to-register-passkey-with-security-key/sign-in-microsoft.png" alt-text="Screenshot of the sign in to Microsoft prompt.":::--1. Select **Sign-in options**.--   :::image type="content" border="true" source="media/how-to-register-passkey-with-security-key/sign-in-options.png" alt-text="Screenshot of the sign in options for Microsoft.":::--1. Choose **Face**, **Fingerprint**, **PIN**, or **Security key**.-1. A security window opens. Follow the remaining prompts to sign-in with the method that you selected. --## Next steps+## Related content -- [Choosing authentication methods for your organization](concept-authentication-methods.md)-- [Register security keys on behalf of users](how-to-authentication-passkeys-fido2.md)+- [Sign in with a FIDO2 security key](how-to-security-key-sign-in.md)+- [Register a synced passkey (FIDO2)](how-to-register-passkey.md)+- [Enable passkeys (FIDO2) in Microsoft Entra ID](how-to-authentication-passkeys-fido2.md)+- [Passkey FAQ](passkey-faq.yml)