Even if you buy a security key that supports FIDO2, it does not often come with an instruction manual. You want to use it on a FIDO2-compatible site or application, but where to set the PIN? Or where to enroll the fingerprint? I think some people would be confused. This article describes how to set the PIN and fingerprint of the FIDO2-compatible security key.
There are 3 main patterns for setting FIDO2-compatible security keys.
(Hereafter, FIDO2-compatible security keys are abbreviated as security keys.)
Security key setup for Windows (10, 11) → Here is how to do it. Below are links to each section. How to access the security key setup screen How to register PIN How to enroll fingerprints How to add another fingerprint How to remove fingerprints How to change the PIN How to reset the security key → If your security key has been blocked, please follow these steps to reset it. Buy a security key
Setup using Chrome browser for macOS and Linux → FIDO2 Security Key PIN Setting / Fingerprint Setting - for macOS
Setup using tools provided by each authentication device vendor → Please check the website of each authentication device vendor.
This article describes how to set up a security key using a Windows PC.
Environment Information
PC
Windows 11 ※ Windows 11 was used for the explanation, but the same operation is possible for Windows 10.
Security Key
YubiKey 5 NFC (non-biometric)
YubiKey Bio (biometric)
※ The above security keys were used for the explanation, but the same operation is possible with other security keys.
Notes
Leaving the setup screen for too long
The next operation may fail if the security key setup screen is left for too long.
When you are asked to operate with the security key, if you leave it too long, it may fail due to timeout.
Information about PIN change Even if you change the PIN of a security key that has already been registered on multiple websites, you can use it without any problems.
About security key reset If you enter the wrong PIN 8 times in a row, you will be asked to reset your security key. After resetting, all the credentials that have been registered on websites and apps so far will also be removed.
If the security key does not respond Please try the following operations:
If it is connected via a USB hub, etc., try to connect it to the PC directly.
If there is still no response after connecting to the PC directly, please try on another PC.
※ If there is still no response after trying the above ways, please contact the vendor where you bought the security key. Please use the inquiry form to inquire about keys purchased from us.
Setting security key
When you buy a security key, by default it has no PIN or fingerprint.
First, I will explain how to set a PIN.
※ Fingerprint-enabled devices also require a PIN.
[ How to access the security key setup screen ]
First, insert your security key into the USB port.
Then, right-click on the Start menu ＞ "Settings" ＞ "Account" ＞ "Sign-in options".
Click the "Security key", then click the "Manage" button.
You will be asked to touch your security key, so touch your security key button (a metal part, a biometric sensor, a part where the light is blinking, etc.).
After the security key touch is successful, the security key setup screen will be displayed.
[ How to register PIN ]
This section explains how to register a PIN. The explanation here assumes that the setting screen is displayed.
In case you have not opened the security key setup screen, refer to "How to access the security key setup screen" to access the setting screen.
Click the "Add" button below Security Key PIN.
※ If your device supports fingerprints, you will see the "Security Key Fingerprint" item.
Enter a new PIN in the upper row and enter a PIN for confirmation in the lower row.
Click the "OK" button after entering.
※ PIN can be set from 4 to 63 characters (length range defined by FIDO2 specification).
After the PIN registration is completed, the button below the Security Key PIN item will change to "Change".
The PIN setting is completed.
For other settings, please refer to the following.
Please refer to "How to enroll fingerprints" to enroll your fingerprint.
[ How to enroll fingerprints ]
You must set a PIN before enrolling your fingerprints. If the PIN setting has not been completed yet, set a PIN by referring to "How to register PIN".
This section describes how to enroll your fingerprints to your security key. The explanation here assumes that the setting screen is displayed.
In case you have not opened the security key setup screen, refer to "How to access the security key setup screen" to access the setting screen.
Click the "Set up" button under the Security Key Fingerprint item.
You will be asked to verify your identity, so enter the PIN set for the security key and click the "OK" button.
After confirming your identity, you will be asked to touch the fingerprint sensor, so follow the instructions on the screen and touch the fingerprint sensor on the security key.
The following screen will be displayed, so repeatedly put your finger on the fingerprint sensor and release it.
After the fingerprint enrollment is completed, the completion screen will be displayed, so click the "Done" button.
When you return to the first screen, the "Add another" button and the "Remove" button are added under the Security Key Fingerprint item.
The fingerprint enrollment is completed.
For other settings, please refer to the following.
[ How to add another fingerprint ]
This section describes how to add another fingerprint to a security key that has already enrolled at least 1 fingerprint. The explanation here assumes that the setting screen is displayed.
In case you have not opened the security key setup screen, refer to "How to access the security key setup screen" to access the setting screen.
Click the "Add another" button under the Security Key Fingerprint item.
After that, you will be asked to enroll your fingerprint in the same procedure as "How to enroll fingerprints".
That's all for how to add another fingerprint.
Addition
About another fingerprint enrollment If you use the fingerprint setting tool provided by each authentication device vendor, you may be able to name and manage registered fingerprints.
[ How to remove fingerprints ]
This section describes how to remove fingerprint data from the security key. The explanation here assumes that the setting screen is displayed.
In case you have not opened the security key setup screen, refer to "How to access the security key setup screen" to access the setting screen.
Note
About security key fingerprint deletion The remove function under the Security Key Fingerprint item is to remove all fingerprint information. ※ If you use the fingerprint setting tool provided by each authentication device vendor, you may be able to delete the enrolled fingerprint information individually.
Click the "Remove" button under the Security Key Fingerprint item.
You will be asked to verify your identity, so enter the PIN set for the security key and click the "OK" button.
After the fingerprint deletion is complete, the display under the Security Key Fingerprint switches to the "Set up" button.
That's all for removing fingerprints.
[ How to change the PIN ]
This section explains how to change the security key PIN. The explanation here assumes that the setting screen is displayed.
In case you have not opened the security key setup screen, refer to "How to access the security key setup screen" to access the setting screen.
Click the "Change" button under Security Key PIN.
Enter your current PIN in the top row and your new PIN in the middle row.
Finally, enter the PIN for confirmation at the bottom row and click the "OK" button.
After changing the PIN, you will return to the first screen.
The PIN change is complete.
[ How to reset the security key ]
This section describes how to delete all security key settings and reset them to factory settings. The explanation here assumes that the setting screen is displayed.
In case you have not opened the security key setup screen, refer to "How to access the security key setup screen" to access the setting screen.
Note
About resetting a security key that is already in use If you reset a security key that has already been registered to a website or application, your authentication information will also be lost. If you want to use the reset security key, you will need to set your PIN and fingerprint and re-register to the website you are using.
Click the "Reset" button under the Reset Security Key item.
Click the "Proceed" button on the reset confirmation screen.
You will be asked to reinsert your security key, so remove your security key from the USB port and reinsert it.
You will be asked to touch your security key twice within 10 seconds, so touch your security key button (a metal part, a part where the light is blinking, etc.) twice.
When the Reset Complete screen is displayed, click the "Done" button.
After the reset is completed, the PIN and fingerprints that have been set up until now will be removed.
Security key reset is completed.
If you want to use the reset security key again, register your PIN or fingerprint, and register your authentication information to the website or application you are using.
[ Buy a security key ]
We sell multiple FIDO2-compatible security keys. You can also buy from Amazon as the following.
Buy on Amazon
※ Please contact us for bulk purchases.