Skip to main content

How to Add a YubiKey to Your Microsoft Account

These instructions are intended for Microsoft Login Pilot Program only.

You can set up a YubiKey passwordless login to your Microsoft account with passwordless authentication.

What is a security key? 

A security key is a hardware-based device that plugs into a computer to simplify two-step authentication. When prompted to authenticate, you simply tap the physical key. There’s no need to use your smartphone, and the same security key can be used on multiple devices.

Step 1: YubiKey Setup 

  1. On your computer, open a new incognito/private browser window and navigate to https://mysignins.microsoft.com/security-info. If prompted to use Cardinal Key, cancel the prompt.
  2. Enter your username in the following format: <your SUNetID>@stanford.edu.
  3. Complete the sign-in process - the steps may vary depending on your previously configured authentication methods.
  4. You should be taken directly to the Security info page for your account. At the top of the list of sign-in methods, you should be able to select + Add sign-in method.
    add sign in method
     
  5. Choose the option for Security Key.
    choose option for security key
  6. Choose the option for USB device.
    choose option for USB
     
  7. Follow the prompts as they walk you through authenticating the YubiKey.
    follow prompts
  8. Within the Windows Security prompt, choose the option for Security key and select Next.
    selection security key option
  9. Verify that this request is coming from you and select OK.
    select ok
  10. You will see a warning that our Microsoft tenant will store a copy of the security key. Select Ok to continue the set up.
    select ok to continue
  11. Insert the YubiKey when prompted.
    Prompt to insert YubiKey
  12. If you have a PIN, you will be asked to unlock the YubiKey. Enter your PIN and select OK.
    Prompt to enter PIN
  13. It will then ask you to physically touch your security key.
    Prompt to touch security key
  14. Windows Security will confirm that the security key is set up for sign-ins to Microsoft.
    Confirmation security key is set up
     
  15. Give your security key a name that is easy to recognize.
    enter name of security key
     
  16. Microsoft will confirm the addition of your security key and you should see it in the list of sign-in methods.
    Key name appears on list of sign in methods
     

Step 2: YubiKey login from a Windows device

  1. On your computer, open a new incognito/private browser session and go to https://outlook.office365.com. If your browser attempts to use Cardinal Key, cancel out of it.
  2. Enter your username as <your SUNetID>@stanford.edu. 
  3. Select Face, fingerprint, PIN or security key.
    Select Face, fingerprint, PIN or security key

     
  4. Select Security key.

     
  5. Insert and authenticate your YubiKey.
  6. After physically touching the YubiKey, you should be put directly into Outlook.
     
Last modified