Use a Hardware Security Key for Multi-Factor Authentication

Use a Hardware Security Key for Multi-Factor Authentication

Use a Hardware Security Key for Multi-Factor Authentication

Overview

A hardware security key is a small USB or NFC device that proves it is really you when you sign in. It is the strongest form of MFA available because attackers cannot phish a physical key out of your pocket. This guide explains how to register one with your work account.

Before You Begin

  • A FIDO2-compatible security key (YubiKey 5 series, Google Titan, or similar). Your IT team can recommend a model.
  • Your work account password.
  • A computer with an available USB-A or USB-C port, depending on your key.
  • A second factor already configured (such as Microsoft Authenticator) so you can finish setup.

Steps

  1. On your computer, go to https://aka.ms/mfasetup (Microsoft 365) or https://myaccount.google.com/security (Google Workspace).
  2. Sign in and complete your existing MFA prompt.
  3. Find the security methods section. In Microsoft, click Add sign-in method. In Google, click 2-Step Verification → Security key.
  4. Choose Security key (Microsoft) or Add security key (Google).
  5. When prompted, insert your security key into a USB port. If your key uses NFC, hold it against the back of your phone instead.
  6. Touch the gold disc or button on the key when it blinks.
  7. Give the key a friendly name like Work laptop YubiKey so you can identify it later.
  8. Set a PIN for the key if asked. Write the PIN in your password manager.
  9. Click Done. Test it by signing out and signing back in.

Troubleshooting

  • If your browser does not detect the key: try a different USB port, or switch to Edge, Chrome, or Safari. Older browsers may not support FIDO2.
  • If you forget your security key PIN: the key must be reset, which erases all registrations. Contact support before resetting.
  • If you lose your key: sign in with your backup method (Authenticator app or backup codes), remove the lost key from your account, and request a replacement.
  • If your key is required but you forgot it: contact support. They can grant temporary access while you retrieve it.

Related Articles

Need More Help?

Submit a ticket at support.bostonmit.com or email support@bostonmit.com.