Protect Your Microsoft Account with Yubikey

A Microsoft account is a sign-on web service that lets users access a wide selection of proprietary and third-party services and applications, including productivity tools, social tools, and exclusive features such as Outlook, Skype, Office and OneDrive.

To protect Microsoft accounts, Yubico and Microsoft collaborated to deliver a strong passwordless authentication for the user’s account security. Protecting your Microsoft account with YubiKey is vital, as it provides advanced security features against hackers or remote attackers who may attempt to steal or access your account information and credentials.

What is a Yubikey Security Key and How will it Protect Microsoft Account?

The YubiKey security key utilizes a combination of hardware-based authentication, public key cryptography and U2F and FIDO2 to offer protection against account takeovers. It provides all-around authentication options such as a single-factor (passwordless), two-factor (2FA) or multi-factor authentication (MFA). With the use of hardware security keys, the user's Microsoft account will be equipped with extra protection of two-factor authentication for a secured login method.

Simply register YubiKey in your Microsoft account in the security settings and ensure to also register multiple keys for backups in case your primary keys are forgotten or lost. You can directly insert the YubiKey into the USB port or tap in against your mobile phone. You can also set an alphanumeric PIN with your YubiKey for additional protection.

Compatible YubiKeys for Microsoft Account

Microsoft accounts work with a wide range of Yubico’s physical security keys, which include:

●        Security Key C NFC

●        Security Key NFC

●        YubiKey 5 NFC

●        YubiKey 5 NFC FIPS

●        YubiKey 5 Nano

●        YubiKey 5 Nano FIPS

●        YubiKey 5C

●        YubiKey 5C FIPS

●        YubiKey 5C NFC

●        YubiKey 5C NFC FIPS

●        YubiKey 5C Nano

●        YubiKey 5C Nano FIPS

●        YubiKey 5Ci

●        YubiKey 5Ci FIPS

●        YubiKey Bio - FIDO Edition

●        YubiKey Bio C - FIDO Edition

How to Set Up and Sign In with Yubikey Security Key

Windows Hello is a more personal method of signing in with the use of face recognition, fingerprint or a PIN. You can set up your Microsoft account with any compatible YubiKey security key. These security keys can either be a USB key that can be plugged into the device or an NFC key that can be tapped on an NFC reader.

Here are the steps on how to set up Windows Hello and how to sign in to your Microsoft account using the security key.

For Windows 10

To set up Windows Hello:

1. Simply go to the Start menu and select Settings.

2. Go to Accounts > Sign-in options

3. Under the Manage How You Sign In To Your Device option, click on Windows Hello Item to Add.

To add Windows Hello as a sign in method for your Microsoft account:

1. Directly go to the Microsoft account page and sign in as you normally do.

2. Click Security > More security options

3. Click Add a new way to sign in or verify

4. Select Use your Windows PC

5. Follow the dialogs to set up Windows Hello as a method for signing in.

To sign in with a Security Key:

1. Simply go to the Microsoft account page and sign in as you normally do.

2. Click Security > More security options

3. Click Add a new way to sign in or verify

4. Select Use a security key

5. Determine the type of key you have (USB or NFC) and then select Next.

6. You will be redirected to the setup experience where you will insert or tap your key.

7. Create a PIN or enter an existing PIN

8. Take the follow-up action by touching either the button or gold disk if your key has one (or read the instruction manual to figure out what else it might be).

9. Name your security key so that you can easily identify it from other keys.

10. Sign out and open Microsoft Edge, click Use Windows Hello or security key instead, and sign in by inserting or tapping your key 

For Windows 11

To set up Windows Hello

1. Click Start > Settings > Accounts > Sign-in options.

2. Under Ways to sign in, click a Windows Hello item to add.

To add Windows Hello as a sign in method for your Microsoft account:

1. Directly go to the Microsoft account page and sign in as you normally would.

2. Click Security > Advanced security options.

3. Select Add a new way to sign in for verify.

4. Select Use your Windows PC.

5. Follow the instructions to set up Windows Hello as a method for signing in.

 To sign in with a Security Key:

1. Go to the Microsoft account page and sign in as you normally do.

2. Click Security > More security options.

3. Select Add a new way to sign in or verify.

4. Select Use a security key.

5. Identify the type of key you have (USB or NFC) and click Next.

6. You will be redirected to the setup experience where you will insert or tap your key.

7. Create a PIN or enter an existing PIN

8. Take the follow-up action by touching either the button or gold disk if your key has one (or read the instruction manual to figure out what else it might be).

9. Name your security key so that you can identify it from other keys.

10. Sign out and open Microsoft Edge, select Use Windows Hello or security key instead, and sign in by inserting or tapping your key.

Yubico is a global authentication leader that provides advanced security solutions for computers, servers and Internet accounts. Yubico’s security key, YubiKey delivers high-level authentication features and provides authentication protocols such as the Yubico U2F security key.

Yubico offers a range of Yubico security key NFC and Bio products that include YubiKey 5 NFC, YubiKey 5C NFC, YubiKey 5Ci, YubiKey 5 Nano and YubiKey Bio.