MFA & Verification Issues

How to Set Up a FIDO2 Security Key in Microsoft Entra ID

Muhammad Talha Oct 20, 2026 868 views

Question details

The user needs to enable and configure a FIDO2 security key as a sign-in method for Microsoft 365, as the option is currently unavailable in the user's security info.

How to Set Up a FIDO2 Security Key in Microsoft Entra ID

Product: Microsoft Entra ID
Device & OS: not provided
Scenario: Registering authentication methods for Microsoft 365 using a physical USB or NFC security key.
Observed behavior: The Security key sign-in option is missing when the user attempts to add a new authentication method in their account security settings.

Before you start

Ensure you have global administrator or authentication policy administrator privileges in Microsoft Entra ID, and that you have a compatible FIDO2 USB or NFC security key ready.

Solution 1Recommended

Enable the FIDO2 Security Key Policy in Microsoft Entra ID

Administrators must first enable the FIDO2 security key method in the Entra ID tenant before users can register their physical keys.

By default, the option to register a security key is not available to users until an administrator explicitly allows it in the tenant's authentication methods policy.

Access the Microsoft Entra admin center

Sign in to the Microsoft Entra admin center using an account with at least Authentication Policy Administrator permissions.

Navigate to Authentication Methods

On the left-hand menu, go to 'Protection', select 'Authentication methods', and then click on 'Policies'.

Configure the FIDO2 Policy

Select 'FIDO2 Security Key' from the list of available authentication methods.

Enable and Target Users

Toggle the Enable setting to 'Yes', choose the appropriate users or groups under the 'Include' tab, and click 'Save' to apply the policy.

Enable the FIDO2 Security Key Policy in Microsoft Entra ID

Solution 2

Register the Security Key in User Security Info

Once the administrator has enabled the policy, users can add their compatible USB or NFC security key to their account.

Free Microsoft Office alternative

Looking for a Lightweight, Reliable Office Suite? Try WPS Office

While managing Microsoft 365 environments and Entra ID security keys can be complex, your daily document tasks shouldn't be. WPS Office offers a free, user-friendly, and lightweight alternative to Microsoft Office, letting you edit documents, spreadsheets, and presentations seamlessly without heavy subscriptions or administrative overhead.

1. Download the Installer: Visit the official WPS website and download the free WPS Office installer for your operating system.
2. Install the Software: Run the downloaded file and follow the straightforward setup instructions to install WPS Office on your device.
3. Edit Your Documents: Open WPS Office and drag-and-drop your existing Word, Excel, or PowerPoint files to start working immediately.

Fully compatible with Microsoft Office formats including .docx, .xlsx, and .pptx.Free and lightweight alternative to Microsoft 365 with a familiar, easy-to-learn interface.Built-in robust PDF editor to view, edit, annotate, and convert PDF files.Cross-platform support available on Windows, Mac, Linux, iOS, and Android.

microsoft office alternative - wps office

Frequently Asked Questions

Why is the Security key option missing in my Microsoft 365 account?

The option is typically missing because your organization's IT administrator has not yet enabled the FIDO2 Security Key authentication method policy in the Microsoft Entra admin center.

What types of security keys are compatible with Microsoft Entra ID?

Microsoft Entra ID supports FIDO2-compliant security keys. Depending on the device hardware you are using, these keys can be connected via USB, NFC, or Bluetooth.

Can I use a FIDO2 security key to sign in without a password?

Yes, FIDO2 security keys enable passwordless authentication. Once configured, you can sign in securely to your Microsoft 365 account using just the physical key and a PIN or biometric gesture.

Login & Account Issues